ServiceMain
bobo
coco
Static task
static1
Behavioral task
behavioral1
Sample
c07773de7201ffe6d3cac8e412ebf5a0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c07773de7201ffe6d3cac8e412ebf5a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c07773de7201ffe6d3cac8e412ebf5a0_JaffaCakes118
Size
123KB
MD5
c07773de7201ffe6d3cac8e412ebf5a0
SHA1
1752380050248d4ccefd89e9a82b964357d52932
SHA256
c1e1092cb864aa224bcec8a5890365d3566b42a279d0904c6099659140ac8061
SHA512
a14a91111a2d8e9f7bdd77aaeaca665fec9f8b9dc60fdf8f7bd7629626e1f8b4a2d4d2ddc68a29952ba9d22932646f10f82fcf11a7c4de19834718f447794701
SSDEEP
3072:/ZC5/ZYugOoKp3YQJMEeAKKwD3VNCJWljh/GtJqyAIgHIo5Oppw6kl:kluuDp3YcMxLrCJWl16JqzIJWOppw9l
Checks for missing Authenticode signature.
resource |
---|
c07773de7201ffe6d3cac8e412ebf5a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalFree
GetModuleHandleA
GetProcAddress
VirtualProtect
CloseClipboard
BitBlt
SetServiceStatus
SHGetFileInfoA
SHDeleteKeyA
_strnicmp
getsockname
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
InternetOpenA
capGetDriverDescriptionA
ICSeqCompressFrame
EnumProcessModules
ServiceMain
bobo
coco
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ