ServiceMain
install
uninstall
Static task
static1
Behavioral task
behavioral1
Sample
b1ff1ef983a1aee3a395788ec441d006_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1ff1ef983a1aee3a395788ec441d006_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b1ff1ef983a1aee3a395788ec441d006_JaffaCakes118
Size
18KB
MD5
b1ff1ef983a1aee3a395788ec441d006
SHA1
d282f674fd7d60ae87e6fd34371e66dedbdbb225
SHA256
80607067fdcdffba9fa52c6da83bae7f164026811ba21d077e55b263d926591c
SHA512
ef46fa441d976ff1481af8ed141cfe9dfa69439116be5b488e24a6de394a85ddddd9f60166885a3d56e1dab86592356890c9a2560b72a8e09c847f9bbd7df34b
SSDEEP
384:WvvhQsw6uL/DM3p0PyiKajSxLGuJxyZWe8EcWA/Y:YvhQsruHMAyiKKSFTyKEC/Y
Checks for missing Authenticode signature.
resource |
---|
b1ff1ef983a1aee3a395788ec441d006_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetExitCodeProcess
CreateProcessA
GetFileAttributesA
GetSystemDirectoryA
ExpandEnvironmentStringsA
SetStdHandle
GetVolumeInformationA
GetDriveTypeA
lstrcatA
PeekNamedPipe
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WriteFile
GetFileSize
GetModuleFileNameA
TerminateThread
ReadFile
GetConsoleDisplayMode
AllocConsole
CreateFileA
WriteConsoleInputA
GetComputerNameA
Sleep
CreatePipe
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateThread
WaitForSingleObject
CloseHandle
TerminateProcess
GetLogicalDrives
GetLastError
_adjust_fdiv
malloc
_initterm
free
wcstombs
atol
strrchr
sscanf
__CxxFrameHandler
_strcmpi
atoi
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
InternetReadFile
HttpSendRequestA
InternetQueryOptionA
InternetCloseHandle
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetOpenA
StartServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
OpenProcessToken
CreateProcessAsUserA
CloseServiceHandle
EnumServicesStatusExA
OpenSCManagerA
ControlService
OpenServiceA
URLDownloadToFileA
GetUserNameExA
ServiceMain
install
uninstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ