SchedServiceMain
ServiceMain
SvchostEntry_W32Time
abc
explore
Static task
static1
Behavioral task
behavioral1
Sample
2ee9cf586251bc939b8076492e5a8f44_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ee9cf586251bc939b8076492e5a8f44_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
2ee9cf586251bc939b8076492e5a8f44_JaffaCakes118
Size
173KB
MD5
2ee9cf586251bc939b8076492e5a8f44
SHA1
0bc9c5fa55f14c2171406cb66c1e6e9ffad58edd
SHA256
62413b0d10835ce7803274ec598f5bb4b2007cb5bb0c33c6c8533babd98b7746
SHA512
162a0bab72d84807f2987818280fcbc264fcf66274f10b785017f2ef9b06801ca40cbc058477c4be2b1cb4499256952c09be01473c115591210af3d3bddcd26a
SSDEEP
3072:sT2Ib3xpXRAWruGEl+vvhC+SZ9BcV6rahuYD16IOan:sTjb3xpaWruGf4f0V6m116
Checks for missing Authenticode signature.
resource |
---|
2ee9cf586251bc939b8076492e5a8f44_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
MapViewOfFile
UnmapViewOfFile
GetVersionExA
CreateFileMappingA
CreateFileA
GlobalAlloc
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
GetSystemTime
lstrcatA
DeviceIoControl
lstrcatW
GetSystemDirectoryW
lstrcmpiW
GetModuleFileNameW
WriteFile
IsBadWritePtr
LockResource
SizeofResource
LoadResource
FindResourceA
lstrlenW
FreeLibrary
CreateFileW
HeapFree
lstrcpynA
HeapAlloc
GetProcessHeap
lstrcmpiA
DuplicateHandle
TerminateJobObject
AssignProcessToJobObject
CreateJobObjectA
LoadLibraryExA
lstrcpyA
Sleep
WaitForSingleObject
SetFileAttributesA
SetEndOfFile
SetFilePointer
CopyFileA
FlushFileBuffers
RemoveDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
InterlockedExchange
GetTempPathA
GetTickCount
GlobalFree
OpenProcess
GetStartupInfoA
CreateProcessA
GetCurrentProcess
GetCurrentThreadId
CreateEventA
GetLastError
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
LoadLibraryA
CreateThread
CloseHandle
LoadLibraryW
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcpyW
ExitProcess
VirtualQuery
wsprintfW
wsprintfA
GetInputState
PostThreadMessageA
PeekMessageA
CloseServiceHandle
DeleteService
OpenSCManagerA
OpenServiceA
CreateServiceA
StartServiceA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
CreateProcessAsUserA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupAccountSidA
GetTokenInformation
SetServiceStatus
RegisterServiceCtrlHandlerW
ControlService
RtlInitUnicodeString
RtlUnwind
NtQuerySystemInformation
NtQueryObject
RtlEqualUnicodeString
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
abc
explore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ