CoGetComCatalog
GetName
GetRPCSSInfo
ServiceMain
WhichService
_GetName@16
Static task
static1
Behavioral task
behavioral1
Sample
d66efb5d6a30a3ddb053992775d52ce8_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d66efb5d6a30a3ddb053992775d52ce8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d66efb5d6a30a3ddb053992775d52ce8_JaffaCakes118
Size
394KB
MD5
d66efb5d6a30a3ddb053992775d52ce8
SHA1
a21429886e03d6ded2102886ccb947e656abba21
SHA256
254b61f26bce00cc7cd47a864044f160e9cde6ceda36fedcde1f796588486170
SHA512
59c0700d024927a48c4be7a93a9dd9d1e1ca6fd68d7d829e77129faedc540da33b3ed652f8e23939b370599b83f800b5a0e050e263480f94213b21d5e745b9c1
SSDEEP
768:0ElcJzXDV6ZFwI2i5oAtEySHr01Xt6uh5mGyEvCrX:7lcpVKyXBTr03hmGypX
Checks for missing Authenticode signature.
resource |
---|
d66efb5d6a30a3ddb053992775d52ce8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryA
ReleaseMutex
GetLastError
VirtualFreeEx
WaitForSingleObject
VirtualAllocEx
FindClose
FindNextFileA
lstrcmpiA
lstrcpyA
lstrcatA
GetCurrentProcess
WriteFile
GetModuleHandleA
SetFileTime
GetFileTime
CreateMutexA
FindResourceA
SizeofResource
LoadResource
CreateFileA
DeleteFileA
MoveFileExA
CopyFileA
GetModuleFileNameA
CloseHandle
GetCurrentProcessId
Sleep
wsprintfA
SetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
RegSetValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
RegCloseKey
StrStrIA
MakeSureDirectoryPathExists
free
strncat
memset
_beginthreadex
strcmp
??2@YAPAXI@Z
strstr
CoGetComCatalog
GetName
GetRPCSSInfo
ServiceMain
WhichService
_GetName@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ