InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
125f9f72e6adca2010ebdcccd46fb374_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
125f9f72e6adca2010ebdcccd46fb374_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
125f9f72e6adca2010ebdcccd46fb374_JaffaCakes118
Size
10KB
MD5
125f9f72e6adca2010ebdcccd46fb374
SHA1
8bdf24176a4ef87551d39d4e04d8f4fe79dcf12e
SHA256
a5c54de483c642c34dd2f66dba18fe168079b5b6f798e2fbd296518821f12e14
SHA512
73d42397e4d0cb83bd95b249b900e0a38aeaa49105d4ded975a8e11739ddc107e4f292cab27ed95a619ed26b2d81dff72824af0906e70ad04623774e4d8d8c30
SSDEEP
192:az2lNzmJ5UG7gmFUoVO6TDwmRiAYGzoNXsvRyJQPajju4V:jNxGk8hDwmRijlXsvRU8ajZ
Checks for missing Authenticode signature.
resource |
---|
125f9f72e6adca2010ebdcccd46fb374_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
InternetReadFile
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
HttpEndRequestA
RegSetValueExA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
ChangeServiceConfig2A
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
CloseServiceHandle
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
fclose
fwrite
atoi
_beginthreadex
_CxxThrowException
__CxxFrameHandler
strchr
strncat
strncpy
wcstombs
_except_handler3
fopen
LoadLibraryA
CloseHandle
SetFileTime
SystemTimeToFileTime
CreateFileA
SetEvent
OpenEventA
FreeLibrary
GetProcAddress
WaitForSingleObject
GetWindowsDirectoryA
GetPrivateProfileStringA
CreateEventA
GetTempPathA
GetSystemDirectoryA
CreateProcessA
DeleteFileA
SetLastError
GetModuleFileNameA
GetLastError
FreeConsole
Sleep
InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ