CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
tttt
Static task
static1
Behavioral task
behavioral1
Sample
87d6265c518cf4e5f43b8d418d812d1e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87d6265c518cf4e5f43b8d418d812d1e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
87d6265c518cf4e5f43b8d418d812d1e_JaffaCakes118
Size
26KB
MD5
87d6265c518cf4e5f43b8d418d812d1e
SHA1
e0daa924a33dcfb6bd5f04710e63503491548361
SHA256
042cba3478ffada47f14d124e4b12869a1c27948bb42c68eb6ad9d5622792f22
SHA512
268d1f5a3b6230336b893752eb1859611e8ea66ea3a6314f74c30e03896a06f700b0e29051bafea8fed2e3232afecb51d4e47154f2dac21055bf0de30a3ed2ba
SSDEEP
384:J/W3x2x9plGg13x2xQfcNUiZRO7PCBXXpmru7P3k1:7bGgnfWUiUWpmKD3k1
Checks for missing Authenticode signature.
resource |
---|
87d6265c518cf4e5f43b8d418d812d1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadResource
SizeofResource
GetModuleHandleA
lstrlenA
GetSystemDirectoryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
lstrcmpA
WriteFile
MultiByteToWideChar
SetFileTime
GetFileTime
WaitForSingleObject
CreateMutexA
CreateThread
ReleaseMutex
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
Sleep
CopyFileA
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
FindFirstFileA
GetModuleFileNameA
wsprintfA
CreateFontIndirectA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
OpenProcessToken
StrStrIA
PathFileExistsA
memset
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
tttt
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ