Install
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
9569847f250e68275904ec78ba3a9c6b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9569847f250e68275904ec78ba3a9c6b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
9569847f250e68275904ec78ba3a9c6b_JaffaCakes118
Size
32KB
MD5
9569847f250e68275904ec78ba3a9c6b
SHA1
6c1485e04e7ffeadc646f7ddc989c0fc51432b8d
SHA256
00e5e302f0819b5ac500fb99a772822e7756fa337a41b1a8d8293bd39a0d463e
SHA512
8fb925a42efb45b4ac935fb50656e472f2f570050d0a9a9aa486c02c4f00ffbd7890600dd7d65847272cfa1f7711823001336a21fa39a494ea51fb9455158070
SSDEEP
384:u4nE9x5UIUe5XwR05pW/tZy22xDi0hYre/3Lwgwcb/IIG4zbnn:u4nMx5UIR5w05pyVrefL1
Checks for missing Authenticode signature.
resource |
---|
9569847f250e68275904ec78ba3a9c6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDriveTypeA
FindFirstFileA
WinExec
CopyFileA
WriteFile
FindNextFileA
GetLogicalDrives
MoveFileA
FileTimeToSystemTime
GetSystemTime
GetFileTime
CreateFileA
CreateMutexA
TerminateProcess
RemoveDirectoryA
DeleteFileA
FindClose
CreatePipe
SetFileTime
SetFilePointer
GetFileSize
lstrlenA
GetWindowsDirectoryA
GetVersionExA
GetLocaleInfoA
GetACP
CreateDirectoryA
CloseHandle
TerminateThread
Sleep
PeekNamedPipe
SetEvent
WaitForSingleObject
GetSystemDirectoryA
GetComputerNameA
CreateThread
SetProcessShutdownParameters
CreateEventA
ReadFile
CreateProcessA
PostThreadMessageA
GetMessageA
DispatchMessageA
TranslateMessage
ntohs
ntohl
inet_ntoa
gethostbyname
gethostname
WSAStartup
htons
htonl
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
CreateServiceA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegQueryValueExA
InternetOpenUrlA
HttpOpenRequestA
HttpSendRequestA
HttpEndRequestA
InternetCloseHandle
InternetOpenA
InternetConnectA
InternetReadFile
_mbsstr
_adjust_fdiv
malloc
_initterm
free
_mbsnbcpy
strcpy
_mbsicmp
strlen
_itoa
_mbscmp
_except_handler3
_mbsnbicmp
strcat
_mbsnbcat
memset
sprintf
Install
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ