InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
Static task
static1
Behavioral task
behavioral1
Sample
36de45b6d9f137e69092014b52fb9c83_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36de45b6d9f137e69092014b52fb9c83_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
36de45b6d9f137e69092014b52fb9c83_JaffaCakes118
Size
48KB
MD5
36de45b6d9f137e69092014b52fb9c83
SHA1
4bf95a242d15bd9f771db4b1890f4ecf126f5f65
SHA256
1e3efb4deefa71a0c85a2e1f5ea0836ea0fc33a814365cbc65ca81a23e797e17
SHA512
9e324ac000f49e026f99c70dcef5b9cfa48e65831752a044eff06fbb69f2f69b0ed640b49e31ab575f2f45ef76992d89aae5387cf1d1c2048af5062830e7ccc8
SSDEEP
768:932jeBnJo6mT0HoyywWocti4dqoXah2ep2:52+mT0Hoyywu5goXo2z
Checks for missing Authenticode signature.
resource |
---|
36de45b6d9f137e69092014b52fb9c83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetLastError
GetModuleFileNameA
CreateProcessA
GetLastError
FreeConsole
Sleep
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
RegSetValueExA
OpenServiceA
DeleteService
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
CloseServiceHandle
InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ