CoGetComCatalog
GetName
GetRPCSSInfo
ServiceMain
WhichService
_GetName@16
Static task
static1
Behavioral task
behavioral1
Sample
7775ea33752c3aa2959ac33459b4cd47_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7775ea33752c3aa2959ac33459b4cd47_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
7775ea33752c3aa2959ac33459b4cd47_JaffaCakes118
Size
61KB
MD5
7775ea33752c3aa2959ac33459b4cd47
SHA1
d2051f219fe37283c8d518b61c6869876d6773ac
SHA256
4c6880f8bf5d50fb9c290cf31ecea9b884b09cf2e39f5c7521bd546e24cc2f3f
SHA512
9fe9126474ae4e546026878bbd8e3191453cbc9e3d2a91f7f087a3b8e7f7a28af2f5e30ec56d9500d36081d23ecbfcb87bb53519cb5a8395d8de0a54fb29c74e
SSDEEP
768:bwVwvV/tuzOD1/UsB/rT5ic6yL/E9rGW6rVKSH:UVU1t3FUsB/kc6ybEmrVKS
Checks for missing Authenticode signature.
resource |
---|
7775ea33752c3aa2959ac33459b4cd47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SizeofResource
FindResourceA
WriteFile
MultiByteToWideChar
GetProcAddress
LoadLibraryA
ReleaseMutex
GetLastError
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
lstrcmpiA
FindClose
FindNextFileA
lstrcpyA
FindFirstFileA
LoadResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetModuleHandleA
CreateFileA
DeleteFileA
MoveFileExA
CopyFileA
GetModuleFileNameA
CreateMutexA
lstrlenA
CloseHandle
lstrcatA
Sleep
wsprintfA
RegSetValueExA
RegOpenKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
RegOpenKeyExA
strncat
free
strstr
_beginthreadex
??2@YAPAXI@Z
memset
CoGetComCatalog
GetName
GetRPCSSInfo
ServiceMain
WhichService
_GetName@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ