ServiceHandlerEx
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
a15f831db9d88a1f1781c73dd31d41c8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a15f831db9d88a1f1781c73dd31d41c8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a15f831db9d88a1f1781c73dd31d41c8_JaffaCakes118
Size
112KB
MD5
a15f831db9d88a1f1781c73dd31d41c8
SHA1
ae32245a58a11f266966b5535964cbdb33c351de
SHA256
371610b53ca4bb860f4a07162977454ce1c2c15c785c7b3eb9fc0be7ffafa9e6
SHA512
ca1d4841b4068d3ecda5258f0a50323156be28d59ceb81392780c533be9aec0b1e6db82b9d319d47204a4aa07e59a73a9df8f0b7855c9f05716e364e2fd31213
SSDEEP
1536:kHH4ARAQCUgLQqmwiOwGpE4jim3hzwHlM0kTtkpacC:kHH4ARAZlsxwiODMG02tkppC
Checks for missing Authenticode signature.
resource |
---|
a15f831db9d88a1f1781c73dd31d41c8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetFileTime
WriteFile
SetFilePointer
CloseHandle
GetFileTime
CreateFileA
GetCurrentProcess
GetFileSize
GetSystemTimeAsFileTime
GetVersionExA
GetSystemDirectoryA
FlushFileBuffers
WriteConsoleW
GetLastError
FindNextFileA
SetFileAttributesA
RemoveDirectoryA
CreateProcessA
LoadLibraryA
FindFirstFileA
FindClose
Sleep
GetSystemTime
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
lstrlenW
GetConsoleOutputCP
WriteConsoleA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
ExitWindowsEx
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
SetServiceStatus
RegisterServiceCtrlHandlerExA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
ServiceHandlerEx
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ