Install
RunInstall
RundllUninstall
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
e08fc2f3cd0eb735df83101c79025e98_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e08fc2f3cd0eb735df83101c79025e98_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e08fc2f3cd0eb735df83101c79025e98_JaffaCakes118
Size
77KB
MD5
e08fc2f3cd0eb735df83101c79025e98
SHA1
8e5a5e5eed400f35ba4f6c3f8cf0ccf6999e63e0
SHA256
a7c13588464f2122fac679a3850a422b97b12892a7eafb36bbbd2facc9aadb87
SHA512
9e82b7783da4a324e15007d700b5e881f6f845d7ca283aeb37b9a3b95a581f4f54da2d312d562716a78430e2cbc024ea6e2ede1d0c839281f6b3f67073832006
SSDEEP
1536:Ql4Ol0PGc4R8Pv4Dw1yUpbQFnToIfxgY0r5ZmNiTJbn:Forc4RA8w1yUpbQtTBfxgY0r5ZmNiTJr
Checks for missing Authenticode signature.
resource |
---|
e08fc2f3cd0eb735df83101c79025e98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
GetSystemDirectoryA
CloseHandle
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
lstrlenA
lstrcpyA
WaitForSingleObject
MoveFileExA
SetThreadPriority
ExitProcess
FreeConsole
GlobalMemoryStatus
InterlockedExchange
HeapAlloc
GetCurrentThreadId
GetLastError
RaiseException
LocalAlloc
__CxxFrameHandler
_CxxThrowException
_except_handler3
atoi
strcspn
strstr
??3@YAXPAX@Z
wcstombs
rand
srand
malloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
_adjust_fdiv
??2@YAPAXI@Z
strncpy
sprintf
strncat
_strlwr
Install
RunInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ