CTFStart
HandlerEx
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
eb251ad0ed94820208c71f6f62987adb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb251ad0ed94820208c71f6f62987adb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eb251ad0ed94820208c71f6f62987adb_JaffaCakes118
Size
8KB
MD5
eb251ad0ed94820208c71f6f62987adb
SHA1
562657a08623fd5c595b6df7692560536d4383f4
SHA256
4162c3b4864c3ae5cb288d99b791689d030a9e6912618589906ecdbfba95393d
SHA512
8d0fb1603244207f88c2c7c4584c4ae20c4f98ad531c4df38e8901a5e4c745f6715e9d46d191028daa05129b3eec56be5f9f645b32e06816812b57caccff50d8
SSDEEP
96:PIEU5h41F8fdCnwenXdBslpOC7eFHu4EW31mVaWwihkP:zU5YOgnhNClIC7eFORWsVaWF
Checks for missing Authenticode signature.
resource |
---|
eb251ad0ed94820208c71f6f62987adb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
FreeLibrary
GetEnvironmentStringsA
GetLastError
GetProcAddress
GetSystemDirectoryA
CloseHandle
LoadLibraryA
CopyFileA
MoveFileExA
RtlUnwind
RtlZeroMemory
WaitForSingleObject
CreateMutexA
CreateThread
RegisterServiceCtrlHandlerExA
SetServiceStatus
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
_fdopen
_makepath
_open_osfhandle
_sleep
fclose
_cexit
malloc
raise
setbuf
CTFStart
HandlerEx
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ