ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
a1d26ac84e612d540aaf23911ce5c4f4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a1d26ac84e612d540aaf23911ce5c4f4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a1d26ac84e612d540aaf23911ce5c4f4_JaffaCakes118
Size
14KB
MD5
a1d26ac84e612d540aaf23911ce5c4f4
SHA1
c8879f937e6c3eb6b2b286825b16e52b48d72e70
SHA256
abebbed77a2e4fe3ac4d7bce27724599d4d0fede20268fb83fd714809f1e7413
SHA512
11750f83aecfb2f81acbf1245d76cb82d603e6906a3ff2a3d635c266f7eef620bd7022496ec366454763e4b8eeca439245d0e46375b42ad7fa5ad45c4cc2c065
SSDEEP
192:cQ/kZQWPM9mJlZjEWqGN3UtPuBBQ6PRQkONPIg8pd6j8:cskjPnnEMUVuBBQARQkEPIgv
Checks for missing Authenticode signature.
resource |
---|
a1d26ac84e612d540aaf23911ce5c4f4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strlen
memcpy
memcmp
RtlZeroMemory
closesocket
gethostname
VirtualProtectEx
TerminateThread
Sleep
IsBadReadPtr
GetSystemDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
lstrcpynA
lstrcpyA
lstrcmpiA
WritePrivateProfileStringA
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
CreateThread
lstrcatA
lstrlenA
WaitForSingleObject
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
wsprintfA
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ