CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
Static task
static1
Behavioral task
behavioral1
Sample
7701e3730cc7ac6b489b26e5078caa63_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7701e3730cc7ac6b489b26e5078caa63_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
7701e3730cc7ac6b489b26e5078caa63_JaffaCakes118
Size
1.0MB
MD5
7701e3730cc7ac6b489b26e5078caa63
SHA1
511d4829460ba9dcaf833217aca9bd4352f87207
SHA256
318cdb1a7a45f414c99d486da98212a550ef4a54f65708ec2721c44a8306e20e
SHA512
844e78e59fab7362cdbe2bd84b70b7c5741d1437835f08ded05a3cde35a6780e581d3d29e11709389876c14ea6fd6525bde6012d19ac5ee3d810c77316c45fc7
SSDEEP
3072:Sjq1Cn/AZjhI4TbUcXo2rm9rsg5pLbXdvx:kqs/AZlUGlrm9rskpfdv
Checks for missing Authenticode signature.
resource |
---|
7701e3730cc7ac6b489b26e5078caa63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReadFile
LocalAlloc
PeekNamedPipe
lstrcatA
InterlockedDecrement
WinExec
CreateMutexA
CreateFileW
SetFilePointer
SetEndOfFile
UnmapViewOfFile
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
GetFileSize
MapViewOfFile
CreateFileMappingA
GetDiskFreeSpaceExW
GetVolumeInformationW
lstrcpyW
lstrlenW
GetLogicalDriveStringsW
LocalReAlloc
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
CreateRemoteThread
GetVersionExA
GetSystemDirectoryA
CreateFileA
LoadLibraryA
LocalFree
OpenProcess
GetCurrentProcessId
VirtualFreeEx
VirtualAllocEx
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
FreeLibrary
GetCurrentThread
WideCharToMultiByte
lstrcpyA
GetLastError
SetFileTime
GetFileTime
Process32Next
VirtualProtect
GetCurrentThreadId
InterlockedExchange
CreateEventA
ResumeThread
SetEvent
VirtualFree
VirtualAlloc
WritePrivateProfileStringA
GetPrivateProfileStringA
CreatePipe
GetStartupInfoA
CreateProcessA
WaitForSingleObject
TerminateProcess
DisconnectNamedPipe
WriteFile
lstrlenA
InterlockedIncrement
GetDriveTypeW
GetTempPathA
DeleteFileA
CloseHandle
AllocConsole
FreeConsole
Sleep
GetTickCount
MoveFileExA
GetCommandLineA
MultiByteToWideChar
GetCursorPos
CloseWindowStation
CloseDesktop
BlockInput
keybd_event
MapVirtualKeyA
SetCapture
WindowFromPoint
SetCursorPos
mouse_event
ReleaseDC
DestroyCursor
LoadCursorA
GetDesktopWindow
GetDC
CharPrevA
wsprintfA
wsprintfW
SwitchDesktop
SetThreadDesktop
CreateDesktopA
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
SetRect
GetSystemMetrics
GetCursorInfo
CreateCompatibleBitmap
GetDIBits
BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
SHGetFileInfoW
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
VariantClear
SysAllocString
GetErrorInfo
SysFreeString
PathFileExistsW
StrStrIA
PathFileExistsA
StrStrIW
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Xran@std@@YAXXZ
WSACleanup
WSAStartup
htonl
bind
sendto
recv
htons
connect
select
inet_ntoa
inet_addr
gethostname
ioctlsocket
closesocket
socket
gethostbyname
send
rand
_wsplitpath
_beginthreadex
srand
atoi
??2@YAPAXI@Z
strrchr
malloc
wcslen
wcsrchr
_itoa
strncat
strstr
free
wcsncmp
memmove
sscanf
_CxxThrowException
_wtoi
wcsncpy
wcscpy
time
_purecall
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_wcsicmp
__CxxFrameHandler
MakeSureDirectoryPathExists
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ