InstallService
ServiceMain
UninstallService
installA
uninstallA
Static task
static1
Behavioral task
behavioral1
Sample
cfce9478c880934b3548c3022a956e14_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfce9478c880934b3548c3022a956e14_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
cfce9478c880934b3548c3022a956e14_JaffaCakes118
Size
23KB
MD5
cfce9478c880934b3548c3022a956e14
SHA1
aacdf03d98b171fcb5aff843561053b18ab8dc34
SHA256
a908f128b77e8488fd2209fc162779b05ec9b633493751a0f30b2e5664c7183b
SHA512
41f454523b2409c5e569bc6494c07420eb531986363aeceb2d5f87053c5c6b56e418dcf3b2fb3d9c9ba014e14c24e7772ccf903b561fa245c53df752c31caa8d
SSDEEP
384:NcTA0TAKHWYvVvUYGXFgeJGjHwTACLPkIdSgbl/xAIrWdhoQsGziAHz:NcTA0TAK2y2oBCbH4gtxrWd5sGzL
Checks for missing Authenticode signature.
resource |
---|
cfce9478c880934b3548c3022a956e14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStartupInfoA
CreatePipe
GetCurrentDirectoryA
CreateProcessA
lstrlenA
SetLastError
OutputDebugStringA
CloseHandle
ReadFile
GetTempPathA
GetLongPathNameA
LoadLibraryA
GetProcAddress
CreateThread
GetSystemTime
WaitForSingleObject
TerminateThread
Sleep
GetLastError
GetModuleFileNameA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
inet_addr
WSASocketA
closesocket
connect
ioctlsocket
send
select
__WSAFDIsSet
recv
shutdown
WSAStartup
gethostname
WSACleanup
htons
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
_chdir
_strnicmp
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_except_handler3
_CxxThrowException
_stricmp
_EH_prolog
__CxxFrameHandler
strchr
_itoa
strstr
strncat
strlen
sscanf
atol
??2@YAPAXI@Z
memset
wcstombs
strncpy
strcat
strcpy
atoi
fclose
fflush
??3@YAXPAX@Z
fwrite
fopen
strrchr
InstallService
ServiceMain
UninstallService
installA
uninstallA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ