StartServiceEx
StopServiceEx
_ServiceRouteEx@12
Static task
static1
Behavioral task
behavioral1
Sample
dd81515a64a5e9245ea81def0f36ffbd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd81515a64a5e9245ea81def0f36ffbd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dd81515a64a5e9245ea81def0f36ffbd_JaffaCakes118
Size
24KB
MD5
dd81515a64a5e9245ea81def0f36ffbd
SHA1
a66387311806d70675602d5fec4398ab7f47183e
SHA256
ec50356c6db2e0b6eb7414b0d3c20dc49742b1ea0f5143f78666534b4f1b4cb4
SHA512
1442bc74c125de0660bbfa4c8b126b3ae3a20ec017c278ecb6c1fcf6e2b0714983de289151093c54634868e21e5359d816ff0911da1aa6760bc4a2867e17cfd3
SSDEEP
192:vfoTImohsqQLwpiBlwXW6EjuBBQ6PRQkdZo1PpW3r+iSrm9qhd:XRsqgwpRXWxuBBQARQk7o1PpWqii
Checks for missing Authenticode signature.
resource |
---|
dd81515a64a5e9245ea81def0f36ffbd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
lstrcatA
CloseHandle
GetCurrentDirectoryA
GetModuleFileNameA
CreateThread
VirtualProtect
lstrlenA
Sleep
ExitProcess
PostQuitMessage
TranslateMessage
DestroyWindow
MessageBoxA
DispatchMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
wsprintfA
GetKeyboardState
MapVirtualKeyA
ToAscii
SetTimer
KillTimer
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
DefWindowProcA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
gethostname
time
srand
rand
memcpy
strcmp
free
fopen
fclose
fwrite
memset
strcpy
strrchr
memcmp
exit
_initterm
malloc
_adjust_fdiv
strcat
strlen
_strlwr
_itoa
StartServiceEx
StopServiceEx
_ServiceRouteEx@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ