Install
RunInstallA
RunUninstallA
ServiceMain
Uninstall
Static task
static1
Behavioral task
behavioral1
Sample
89881cde87ae27703ef47fde7e111cb3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89881cde87ae27703ef47fde7e111cb3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
89881cde87ae27703ef47fde7e111cb3_JaffaCakes118
Size
137KB
MD5
89881cde87ae27703ef47fde7e111cb3
SHA1
b15f761c50e323dd4fee5e1f7d28c10f2c6c7118
SHA256
0e918bd50cfe2ff6a335b2df5812cf2c0abf368973a931bf5a36f9caa1660466
SHA512
fcde9c23f47255eaee6ed0a4299b2abf68acf733c47286a2a32ffcec53566743e244e14c1b72e3c63d2387f687f812d4ea85926f01602bc03461d65f920838ff
SSDEEP
3072:K176t9GlaKg7Xsh0qr2uDr0HbLhBTUYPBQBonPfqnvM:K17M5Kg7XC56dhhUGumCk
Checks for missing Authenticode signature.
resource |
---|
89881cde87ae27703ef47fde7e111cb3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreatePipe
GetStartupInfoW
GetSystemDirectoryW
CreateProcessW
PeekNamedPipe
WriteFile
GetCurrentThreadId
SetEvent
CreateEventW
GlobalMemoryStatus
GetVersionExW
GetComputerNameW
lstrcpyA
DeviceIoControl
CreateThread
SetLastError
GetLastError
GetModuleFileNameW
GetCurrentDirectoryW
WideCharToMultiByte
GetModuleHandleW
GetProcAddress
GlobalAlloc
lstrlenA
MultiByteToWideChar
LoadLibraryExW
GlobalFree
FreeLibrary
CreateDirectoryW
MoveFileA
lstrcpynW
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
CreateProcessA
GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
GetVersion
InterlockedIncrement
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
GetModuleHandleA
GetProcessVersion
lstrcmpiW
lstrcmpW
GlobalFlags
GetCurrentProcess
SetFilePointer
FlushFileBuffers
SetEndOfFile
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
RaiseException
HeapSize
HeapReAlloc
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileA
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
ReadFile
CreateFileW
GetFileSize
lstrlenW
lstrcatW
FindFirstFileW
FindNextFileW
FindClose
GetDriveTypeW
GetDiskFreeSpaceExW
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
lstrcpyW
Process32NextW
CloseHandle
WaitForSingleObject
Sleep
DeleteCriticalSection
GetTickCount
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoW
RegisterWindowMessageW
SetWindowPos
SetWindowLongW
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropW
CallWindowProcW
GetPropW
SetPropW
CreateWindowExW
DestroyWindow
DefWindowProcW
GetDlgCtrlID
GetWindowTextW
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassW
GetClassInfoW
WinHelpW
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageW
LoadIconW
GetMenuCheckMarkDimensions
SetWindowTextW
LoadCursorW
GetSysColorBrush
GetClassNameW
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutW
DrawTextW
GrayStringW
GetNextDlgTabItem
DispatchMessageW
GetKeyState
CallNextHookEx
PeekMessageW
SetWindowsHookExW
LoadStringW
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
SendMessageW
MessageBoxW
EnableWindow
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
wsprintfW
GetDesktopWindow
SetThreadDesktop
OpenDesktopW
SetProcessWindowStation
OpenWindowStationW
GetThreadDesktop
GetProcessWindowStation
CloseDesktop
GetUserObjectInformationW
OpenInputDesktop
CloseWindowStation
GetSystemMetrics
ReleaseDC
GetDC
IsRectEmpty
GetCursor
CheckMenuItem
EnableMenuItem
GetFocus
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectW
GetDeviceCaps
CreateCompatibleBitmap
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenSCManagerW
CreateServiceW
CloseServiceHandle
OpenServiceW
ChangeServiceConfigW
RegCreateKeyW
RegSetValueExW
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceW
RegEnumKeyExW
DeleteService
ShellExecuteA
SHFileOperationW
ord17
WSACreateEvent
WSAStartup
inet_addr
WSACleanup
socket
htonl
htons
inet_ntoa
closesocket
getpeername
ntohs
connect
recv
gethostbyname
send
select
ntohl
EnumProcessModules
GetModuleFileNameExW
OpenPrinterW
DocumentPropertiesW
ClosePrinter
Install
RunInstallA
RunUninstallA
ServiceMain
Uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ