InstallService
ServiceMain
UninstallService
installA
uninstallA
Static task
static1
Behavioral task
behavioral1
Sample
fefa3638e4d6f2e00b5194ae3fa0c931_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fefa3638e4d6f2e00b5194ae3fa0c931_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fefa3638e4d6f2e00b5194ae3fa0c931_JaffaCakes118
Size
23KB
MD5
fefa3638e4d6f2e00b5194ae3fa0c931
SHA1
eb332c048acdb928868a85eda727c0c619c54421
SHA256
accf700ca998053f160997f5414392372698f991ae743aee1165a78fe9a370df
SHA512
2cfeaca7c8ab9005b4ecf655b3b077a0722b51d9f8ec03dfec1cda496f0c4d8b1e515aa4ef52b493ae3b1b27511d8a0aeea9a4d26e1bd5fe714b4f360b75cdbe
SSDEEP
384:K/cTA0TAKHWYvVvUYGXFgKF2YH30XguLzkIYgb9Tg0K9kdhoQMQziAHz:K/cTA0TAK2y2LX5u3HYgBg3kd5MQzL
Checks for missing Authenticode signature.
resource |
---|
fefa3638e4d6f2e00b5194ae3fa0c931_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetStartupInfoA
CreatePipe
GetCurrentDirectoryA
CreateProcessA
lstrlenA
SetLastError
OutputDebugStringA
CloseHandle
ReadFile
GetTempPathA
GetLongPathNameA
LoadLibraryA
GetProcAddress
CreateThread
GetSystemTime
WaitForSingleObject
TerminateThread
Sleep
GetLastError
GetModuleFileNameA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegSetValueExA
RegisterServiceCtrlHandlerA
SetServiceStatus
inet_addr
htons
closesocket
connect
ioctlsocket
send
select
__WSAFDIsSet
recv
shutdown
WSAStartup
gethostname
WSACleanup
WSASocketA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
_chdir
_strnicmp
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_except_handler3
_stricmp
_CxxThrowException
__CxxFrameHandler
strchr
_itoa
strstr
strncat
strlen
sscanf
atol
??2@YAPAXI@Z
strrchr
memset
wcstombs
strncpy
strcat
strcpy
atoi
fclose
fflush
??3@YAXPAX@Z
fwrite
fopen
InstallService
ServiceMain
UninstallService
installA
uninstallA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ