CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
_abcdef@16
abcdef
Static task
static1
Behavioral task
behavioral1
Sample
ab423afa897e71140f2455caa268fb72_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab423afa897e71140f2455caa268fb72_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab423afa897e71140f2455caa268fb72_JaffaCakes118
Size
29KB
MD5
ab423afa897e71140f2455caa268fb72
SHA1
1b12a8cd0ba552381bbbd7a9563262d126a8abbe
SHA256
76531f799046bc6fc4e3307ee07a031e2ade06ce8fbfa0628b4f1251913cddac
SHA512
43aeeb4ed6da1003fec1175a1f72fb2e84f556fbbd92c1c46bd417bb468f2fcf90e4235b34356343f62f30f872f58b949581382559f2dca616a494a2dedba274
SSDEEP
384:Tc0lEpY7nEFc0lkfctUiN+Dm0nb8UzJe5ObUuUHt3BwpE:CqZf2UijIjJe5Ob5etR2E
Checks for missing Authenticode signature.
resource |
---|
ab423afa897e71140f2455caa268fb72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteFile
LoadResource
SizeofResource
GetModuleHandleA
lstrlenA
GetSystemDirectoryA
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcessId
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
lstrcmpA
MultiByteToWideChar
SetFileTime
GetFileTime
WaitForSingleObject
CreateMutexA
CreateThread
ReleaseMutex
FreeLibrary
CreateEventA
GetLastError
SetEvent
CloseHandle
Sleep
CopyFileA
DeleteFileA
MoveFileExA
LoadLibraryA
GetProcAddress
FindFirstFileA
GetModuleFileNameA
wsprintfA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
OpenProcessToken
StrStrIA
PathFileExistsA
memset
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
_abcdef@16
abcdef
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ