Install
Launch
ServiceMain
UnInstall
Static task
static1
Behavioral task
behavioral1
Sample
3ddb4eef7e1f5691f388a2048e9ef537_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ddb4eef7e1f5691f388a2048e9ef537_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3ddb4eef7e1f5691f388a2048e9ef537_JaffaCakes118
Size
357KB
MD5
3ddb4eef7e1f5691f388a2048e9ef537
SHA1
e2abe9d66c966fd3628f6e411825c745f7edaae7
SHA256
0dd8eed94cddaf730a5a50405c540b902cc302a99677ff50617303ec6a4d9d6c
SHA512
6364f9cc46e2a56e0b9cf735292235980f94d051890f312a8e60bae7c23c6ba7682591e4c66cd8bf19ff4464c8922fa324f4c03f71bfd0932ef0bd073588a225
SSDEEP
6144:RdFfHs7aQg3twps+pBSCCRUlDyUoAs7/VV3I3DL0pemqe9udd:RdZHs/5a+pgCQq+BzVS/zXd
Checks for missing Authenticode signature.
resource |
---|
3ddb4eef7e1f5691f388a2048e9ef537_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
inet_ntoa
InternetOpenW
StrStrW
ImmGetCompositionStringW
mixerSetControlDetails
GetModuleFileNameExW
CreateEnvironmentBlock
GetModuleHandleA
GetModuleHandleA
GetProcAddress
VirtualProtect
SetWindowsHookExW
BitBlt
CreateServiceW
ShellExecuteExW
CoInitialize
SysFreeString
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ