InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
a0b20e690051930d65c478bba1b07851_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a0b20e690051930d65c478bba1b07851_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a0b20e690051930d65c478bba1b07851_JaffaCakes118
Size
124KB
MD5
a0b20e690051930d65c478bba1b07851
SHA1
336c37ba5c31bcbf6f8cf4826e82b7c4c97329d9
SHA256
e7e691ff2c2945424e746f5f8a9c0c3e6e857e77dcab2ec62274fa3eaf2c1612
SHA512
f14d61e3a6148fdceb5d6188cd32a9b9f3adb7bef5ac91e880b20c2268a0bc60cde52ee3ea95bbcd1170ea6cd284d2244e2ea0ff7edea108e28dbf8451c9cf3b
SSDEEP
3072:ntN3KJ4ZgvQKT5YP2pPGfQ7exRfWxPl0V:OJ4ZgJ5YuE
Checks for missing Authenticode signature.
resource |
---|
a0b20e690051930d65c478bba1b07851_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
LeaveCriticalSection
EnterCriticalSection
DisconnectNamedPipe
WaitForMultipleObjects
WaitForSingleObject
TerminateThread
CreatePipe
CreateProcessA
ExitThread
ReadFile
PeekNamedPipe
WriteFile
GetTickCount
DeleteFileA
SetFileAttributesA
UnmapViewOfFile
SetLastError
FreeConsole
GetUserDefaultLangID
GetSystemDirectoryA
lstrcmpiA
GlobalMemoryStatusEx
GetSystemInfo
GetDiskFreeSpaceExA
GetLogicalDrives
GetDriveTypeA
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
FindFirstFileA
FindClose
GetCurrentDirectoryA
TerminateProcess
GetModuleHandleA
GetVersionExA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetCurrentProcess
MapViewOfFile
CloseHandle
GetCurrentProcessId
CreateEventA
OpenProcess
DuplicateHandle
DeviceIoControl
Sleep
GetProcessHeap
SetFilePointer
GetLocalTime
GetLastError
MultiByteToWideChar
CreateFileA
WideCharToMultiByte
ExitWindowsEx
EnumDisplaySettingsA
ControlService
StartServiceA
RegisterServiceCtrlHandlerA
DeleteService
RegEnumKeyA
QueryServiceStatus
ChangeServiceConfigA
RegCreateKeyExA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
OpenEventLogA
ClearEventLogA
CloseEventLog
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
SetServiceStatus
RegCreateKeyA
strncat
strchr
_write
free
malloc
sprintf
mbstowcs
atoi
toupper
sscanf
strncmp
strstr
strtok
__CxxFrameHandler
_CxxThrowException
wcstombs
strncpy
_except_handler3
atol
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_strnicmp
_stricmp
_strcmpi
inet_ntoa
WSASocketA
select
__WSAFDIsSet
gethostbyname
connect
getpeername
WSAAddressToStringA
WSAGetLastError
closesocket
setsockopt
getsockname
ntohs
listen
accept
send
socket
recvfrom
sendto
inet_addr
bind
WSAIoctl
recv
htonl
htons
WSAStartup
WSACleanup
gethostname
InternetOpenA
InternetConnectA
InternetReadFile
InternetCloseHandle
InternetCrackUrlA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetGetConnectedState
NetUserDel
NetUserEnum
NetApiBufferFree
NetUserSetInfo
InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE