InstallService
ServiceMain
UninstallService
installA
uninstallA
Static task
static1
Behavioral task
behavioral1
Sample
b7dba6184f07b1e824362a2307d91ae2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b7dba6184f07b1e824362a2307d91ae2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
b7dba6184f07b1e824362a2307d91ae2_JaffaCakes118
Size
13KB
MD5
b7dba6184f07b1e824362a2307d91ae2
SHA1
c96b9d0be3a6d7e08774938f8167456b9774f5cf
SHA256
d7a159a8a84ab15a9a7572d7cab56b1a9de29aa0cb20aa3d7fc010f4c547ee1a
SHA512
750fb37334021bd44864a012b213841e0535da979e2c8de964135f000fd7253397e0a3fdf36b35920c914f9163e99809b84f88043b01664dee17dbcfa1df1a00
SSDEEP
384:jy57pYOL7kI8ggbm0A12gJ4dVQoQtS9D5Zy:2sOPHTgTA3ydVQc9D5Z
Checks for missing Authenticode signature.
resource |
---|
b7dba6184f07b1e824362a2307d91ae2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreatePipe
GetCurrentDirectoryA
GetLastError
GetStartupInfoA
SetLastError
OutputDebugStringA
CreateProcessA
CloseHandle
ReadFile
GetWindowsDirectoryA
GetLongPathNameA
WinExec
CreateThread
GetSystemTime
WaitForSingleObject
TerminateThread
Sleep
lstrlenA
GetModuleFileNameA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
inet_addr
WSASocketA
closesocket
connect
ioctlsocket
send
select
__WSAFDIsSet
recv
shutdown
WSAStartup
gethostname
WSACleanup
htons
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
_chdir
_strnicmp
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_except_handler3
_CxxThrowException
_stricmp
__CxxFrameHandler
strchr
_itoa
strstr
strncat
strlen
sscanf
atol
??2@YAPAXI@Z
strrchr
memset
wcstombs
strncpy
strcat
strcpy
atoi
??3@YAXPAX@Z
fclose
fflush
fwrite
fopen
InstallService
ServiceMain
UninstallService
installA
uninstallA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ