ServiceMain
SrvEntry
Static task
static1
Behavioral task
behavioral1
Sample
bfdbaac9fbed31b4e7586e15875474ba_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfdbaac9fbed31b4e7586e15875474ba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
bfdbaac9fbed31b4e7586e15875474ba_JaffaCakes118
Size
43KB
MD5
bfdbaac9fbed31b4e7586e15875474ba
SHA1
cda54478c2e7cc1d8ad067b78079abd12f449d1c
SHA256
2caf7ec3525b6f7d58358a180664e381691d210a1df4d22ff226fb5851881a75
SHA512
eaac5c1181a5084696e6a37778c917ce35e1acbe793d3f0a37d76f947b86abd319725a24246a60c3bacc0ff0890d7845141523b8204407ab4899180359e6f69a
SSDEEP
768:dIz81SdHlL6JnEq3yH1BW18ym4pk+VHJuAHyYsiPk+VlwOpW:dQHdFKnEqgm15fRsl+Vl
Checks for missing Authenticode signature.
resource |
---|
bfdbaac9fbed31b4e7586e15875474ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetFilePointer
CopyFileA
GetLastError
GetModuleFileNameA
TerminateThread
WaitForSingleObject
CreateThread
CreateEventA
FreeConsole
SetEvent
SetEndOfFile
DeleteCriticalSection
TerminateProcess
GetExitCodeProcess
PeekNamedPipe
CreateProcessA
CreatePipe
FreeLibraryAndExitThread
MoveFileExA
OpenProcess
WinExec
LeaveCriticalSection
EnterCriticalSection
WriteFile
FlushFileBuffers
GetFileTime
SetFileTime
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemDirectoryA
DeleteFileA
GetTickCount
Sleep
CreateFileA
GetFileSize
CloseHandle
ReadFile
InitializeCriticalSection
RegDeleteKeyA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
RegEnumValueA
RegDeleteValueA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
sprintf
rand
srand
strncmp
strstr
atoi
strchr
free
malloc
system
_snprintf
wcstombs
strncpy
__CxxFrameHandler
??3@YAXPAX@Z
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
_strnicmp
inet_ntoa
recv
send
htonl
WSAGetLastError
htons
setsockopt
socket
ioctlsocket
select
closesocket
connect
shutdown
WSACleanup
WSAStartup
gethostbyname
inet_addr
ServiceMain
SrvEntry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ