Install
Remove
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
ffe2481df2f19fa169405166bacca1b6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ffe2481df2f19fa169405166bacca1b6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ffe2481df2f19fa169405166bacca1b6_JaffaCakes118
Size
48KB
MD5
ffe2481df2f19fa169405166bacca1b6
SHA1
79ba6e124b91eb2b98ea394abd84d114b3666b96
SHA256
ae9c48129b0d27130561ca943b8680f2c5f9beb13e712fffd7405d640c3b66f7
SHA512
5955be1d9c7b7ef8e172fa7d2813ef70336687d77e5d14232f4dbb78827f645e64541cc70265a37684539b1b795f08fe47300aacaf8e1c4c47485100458e6196
SSDEEP
768:mug3im79tcsvTWQhE/Itv43slbgRHauEbaH5UiS60YzLbleop1/esr46Aw:mugsET9hltvTlbglzZ6GbEoLW0
Checks for missing Authenticode signature.
resource |
---|
ffe2481df2f19fa169405166bacca1b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
OutputDebugStringA
GetStartupInfoA
GetSystemDirectoryA
CreateProcessA
WaitForSingleObject
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
SetFilePointer
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetLastError
WideCharToMultiByte
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
RegCreateKeyExA
RegSetValueExA
RegCloseKey
SetServiceStatus
WSAStartup
WSASocketA
htons
connect
inet_addr
send
gethostbyname
inet_ntoa
Install
Remove
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ