ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
a5f00d974bc8301cd20aa8aeca2c58b1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5f00d974bc8301cd20aa8aeca2c58b1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a5f00d974bc8301cd20aa8aeca2c58b1_JaffaCakes118
Size
18KB
MD5
a5f00d974bc8301cd20aa8aeca2c58b1
SHA1
dc5aac9f88a64a0327d7267dfdae94b35c712d05
SHA256
627e74319b0ef158c4b4351472d4e6473c1e7f1889bacd0c5e4a5b4267907741
SHA512
ecc6aabef148ee61088c39ebb11aab6ca837815d483ae73736a9efe8b5a516cefbea2ddcca12304a06ece51d867bd49d53aa862c1dd7c2c782d26a68a47c3588
SSDEEP
384:0AQpe9gHv+mvwNuBBQARQkObJtiLb+HI:0jo9Iv+m4gBBQARQkObmLb+HI
Checks for missing Authenticode signature.
resource |
---|
a5f00d974bc8301cd20aa8aeca2c58b1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strstr
strlen
memcpy
memcmp
RtlZeroMemory
RtlUnwind
closesocket
gethostname
InternetReadFile
InternetOpenA
InternetCloseHandle
GlobalAlloc
VirtualProtectEx
VirtualFree
VirtualAlloc
ReadFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcmpA
lstrcpynA
lstrcpyA
lstrcmpiA
WaitForSingleObject
TerminateThread
Sleep
IsBadReadPtr
CreateThread
lstrlenA
CloseHandle
CreateFileA
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GlobalFree
lstrcatA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ