InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
bdd5ce0a143a9a39809beb178092ae90_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bdd5ce0a143a9a39809beb178092ae90_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bdd5ce0a143a9a39809beb178092ae90_JaffaCakes118
Size
48KB
MD5
bdd5ce0a143a9a39809beb178092ae90
SHA1
587e56fc32cb6afbeedceb74ff931fe0c09b828b
SHA256
f461c1d9fb0c827c113aac915d372cf5b9b584a17e327412b98ec53fe2b43bf3
SHA512
b9ca5b008b01e7a49b5436e25b6e5bf524abe77c1f6629152e4fca1c6efc75bc65a4f8cca94f080895208354270a726c2196f040c85bee016b05a6f451c7892c
SSDEEP
768:v3uZEdZtRcxAWCTWk3wRKojVOtl4dxo0aZ/gfP:fuZEdgCTWk3wbsefo0A/g3
Checks for missing Authenticode signature.
resource |
---|
bdd5ce0a143a9a39809beb178092ae90_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
GetModuleFileNameA
CreateProcessA
GetLastError
FreeConsole
Sleep
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
HeapAlloc
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
RegSetValueExA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
CloseServiceHandle
InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ