Install
RunInstall
RunUninstallX
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
74c877ab29b6639fb79a17a7fb1b1b41_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74c877ab29b6639fb79a17a7fb1b1b41_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
74c877ab29b6639fb79a17a7fb1b1b41_JaffaCakes118
Size
71KB
MD5
74c877ab29b6639fb79a17a7fb1b1b41
SHA1
32bf9c10ab1cdf81b92d2e1f2450cb9ea76509b6
SHA256
31a57f5048cca454f5cb5b3b6cefd1f6c17a0be6acfdd579146a3c043a69b198
SHA512
eee1373ddb49d7527d65d929327e19b51f785afec5cfd15d74daaab072cc2bb344f4d892cafede0c233a64e426971263739ccc97fc32fccd2a89adf76d9b0061
SSDEEP
1536:PJiBaZ70d8AA1TSNFnToIfhWXr5ZWN7mx:RDihA1TSNtTBfhWXr5ZWN7mx
Checks for missing Authenticode signature.
resource |
---|
74c877ab29b6639fb79a17a7fb1b1b41_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
CloseHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
lstrlenA
GetPriorityClass
OpenProcess
Module32First
lstrcpyA
WaitForSingleObject
MoveFileExA
SetThreadPriority
GetFileSize
ExitProcess
FreeConsole
GlobalMemoryStatus
InterlockedExchange
HeapAlloc
GetCurrentThreadId
GetLastError
RaiseException
LocalAlloc
__CxxFrameHandler
_CxxThrowException
_except_handler3
atoi
strcspn
strstr
??3@YAXPAX@Z
wcstombs
rand
srand
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
_adjust_fdiv
??2@YAPAXI@Z
strncpy
sprintf
strncat
Install
RunInstall
RunUninstallX
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ