ServiceRouteEx
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
a010c38047cc724336863ca1bfeca1bb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a010c38047cc724336863ca1bfeca1bb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a010c38047cc724336863ca1bfeca1bb_JaffaCakes118
Size
15KB
MD5
a010c38047cc724336863ca1bfeca1bb
SHA1
670124931bb4463b4e38b071c2b8517ac9945d4e
SHA256
346d8cccbfa84d6bd3a9ecc4af844b0f632dc1acf25781483f26555aba894288
SHA512
dd32a6e1cc9d3689a3b4c0927a113ec7deedc35dc73614ef6ca65bfa15a0a9a55ffe7aca5d4d9fbe45666660e159ea45ff1cace2b111b3e8c0b6c89abc10fec6
SSDEEP
192:sqJ08+hGhZVNdTQMZhVe11utlgmtpMaQuBBQ6PRQk6eTKPr+IEXOi:nZPvV3QihM147MaQuBBQARQkLKPanOi
Checks for missing Authenticode signature.
resource |
---|
a010c38047cc724336863ca1bfeca1bb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strstr
strlen
memcpy
memcmp
RtlZeroMemory
closesocket
gethostname
LoadLibraryA
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateThread
IsBadReadPtr
GetPrivateProfileStringA
lstrcpyA
lstrcmpiA
lstrcmpA
WaitForSingleObject
TerminateThread
Sleep
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
lstrlenA
ReadFile
VirtualProtectEx
lstrcatA
LeaveCriticalSection
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
ServiceRouteEx
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ