InstallService
ServiceMain
UninstallService
installA
uninstallA
Static task
static1
Behavioral task
behavioral1
Sample
9548e5ed4fbacd0ed4a9d6a27f5d8fec_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9548e5ed4fbacd0ed4a9d6a27f5d8fec_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9548e5ed4fbacd0ed4a9d6a27f5d8fec_JaffaCakes118
Size
13KB
MD5
9548e5ed4fbacd0ed4a9d6a27f5d8fec
SHA1
5164b139bcd62926be5ebc40605b1c0569909ead
SHA256
8f0a426fc1b7885a2785c5442d12b9387e84a8ee75daae0234d78b513c7b5c8c
SHA512
7feb1c00db9063011ec5704de7dc0ca7a69c04fcc00619c594fbefd99a869beccb7792a7d4bb9a6df28e686bbf74f73984d0bb938a1577742be31495e84d5d96
SSDEEP
384:34PEZurcNILgbqs0HVi7vH1dloQZT137dI:HZnKLgt0HEvH1d9ZR37y
Checks for missing Authenticode signature.
resource |
---|
9548e5ed4fbacd0ed4a9d6a27f5d8fec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
lstrlenA
GetLongPathNameA
OutputDebugStringA
GetCurrentDirectoryA
CreatePipe
GetStartupInfoA
CreateProcessA
CloseHandle
ReadFile
CreateThread
GetSystemTime
WaitForSingleObject
TerminateThread
Sleep
SetLastError
GetModuleFileNameA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
inet_addr
WSASocketA
closesocket
connect
ioctlsocket
send
select
__WSAFDIsSet
recv
shutdown
WSAStartup
gethostname
WSACleanup
htons
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
_chdir
_strnicmp
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_except_handler3
_CxxThrowException
_stricmp
__CxxFrameHandler
strchr
atol
fopen
fwrite
fflush
fclose
??3@YAXPAX@Z
??2@YAPAXI@Z
_itoa
memset
wcstombs
strncpy
strcat
strcpy
atoi
strlen
sscanf
strncat
strstr
InstallService
ServiceMain
UninstallService
installA
uninstallA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ