ServiceHandlerEx
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
af9262909b01ff09c39107acb02fd53f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af9262909b01ff09c39107acb02fd53f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
af9262909b01ff09c39107acb02fd53f_JaffaCakes118
Size
112KB
MD5
af9262909b01ff09c39107acb02fd53f
SHA1
905941c7f2a130c494cd42e9b5615cbc155c63af
SHA256
a7aa789662430018f35e2bba043ebc695815f5bee9a1e4d38bdc3f97a414ac51
SHA512
e298f3c28e26512e6dfc87e656d3e37f01d44b3deb5113d39234f0ddb25b3d6aac06db7a4a337768f5e569cc9432c16e6877599a2d0b94e6593127261a227d73
SSDEEP
1536:kHH4ARAQCUgLQqmwiOwGpE4jim3hzwHl20kTtkpacC:kHH4ARAZlsxwiODMc02tkppC
Checks for missing Authenticode signature.
resource |
---|
af9262909b01ff09c39107acb02fd53f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetFileTime
WriteFile
SetFilePointer
CloseHandle
GetFileTime
CreateFileA
GetCurrentProcess
GetFileSize
GetSystemTimeAsFileTime
GetVersionExA
GetSystemDirectoryA
FlushFileBuffers
WriteConsoleW
GetLastError
FindNextFileA
SetFileAttributesA
RemoveDirectoryA
CreateProcessA
LoadLibraryA
FindFirstFileA
FindClose
Sleep
GetSystemTime
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
lstrlenW
GetConsoleOutputCP
WriteConsoleA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSection
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
ExitWindowsEx
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
SetServiceStatus
RegisterServiceCtrlHandlerExA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
ServiceHandlerEx
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ