SchedServiceMain
ServiceMain
SvchostEntry_W32Time
abc
explore
Static task
static1
Behavioral task
behavioral1
Sample
a0efbc85972beb4c04e0e048f0206e32_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0efbc85972beb4c04e0e048f0206e32_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a0efbc85972beb4c04e0e048f0206e32_JaffaCakes118
Size
190KB
MD5
a0efbc85972beb4c04e0e048f0206e32
SHA1
65d354edfff9339d6be1ecf2a0db70177e92807e
SHA256
b73ecf67b6cbae3deb994df37aa10b6996546febaf9fe7ee242ce89171dfea70
SHA512
02eea1b0d5a6edd08e3be3fc64a2d4ae98577821bc9f770d1b2ee038be7fd20e24cf2376c55980f38c2037f195a28a4dab47037ed29084f2983ef3451ba91e63
SSDEEP
3072:zT2IbXxpxQi4sJvkxfwLwucvvDowoGRP/tSqyjNKjVkKVQrs:zTjbXxpxMyNLw7oGRNSLNK
Checks for missing Authenticode signature.
resource |
---|
a0efbc85972beb4c04e0e048f0206e32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
MapViewOfFile
UnmapViewOfFile
GetVersionExA
CreateFileMappingA
CreateFileA
GlobalAlloc
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
GetSystemTime
lstrcatA
DeviceIoControl
lstrcatW
GetSystemDirectoryW
lstrcmpiW
GetModuleFileNameW
WriteFile
IsBadWritePtr
LockResource
SizeofResource
LoadResource
FindResourceA
lstrlenW
FreeLibrary
CreateFileW
HeapFree
lstrcpynA
HeapAlloc
GetProcessHeap
lstrcmpiA
DuplicateHandle
TerminateJobObject
AssignProcessToJobObject
CreateJobObjectA
LoadLibraryExA
lstrcpyA
Sleep
WaitForSingleObject
SetFileAttributesA
SetEndOfFile
SetFilePointer
CopyFileA
FlushFileBuffers
RemoveDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
InterlockedExchange
GetTempPathA
GetTickCount
GlobalFree
OpenProcess
GetStartupInfoA
CreateProcessA
GetCurrentProcess
GetCurrentThreadId
CreateEventA
GetLastError
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
LoadLibraryA
CreateThread
CloseHandle
LoadLibraryW
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcpyW
ExitProcess
VirtualQuery
wsprintfW
wsprintfA
GetInputState
PostThreadMessageA
PeekMessageA
CloseServiceHandle
DeleteService
OpenSCManagerA
OpenServiceA
CreateServiceA
StartServiceA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CreateProcessAsUserA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupAccountSidA
GetTokenInformation
SetServiceStatus
RegisterServiceCtrlHandlerW
ControlService
RtlInitUnicodeString
RtlUnwind
NtQuerySystemInformation
NtQueryObject
RtlEqualUnicodeString
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
abc
explore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ