CoGetComCatalog
GetName
GetRPCSSInfo
ServiceMain
WhichService
_GetName@16
Static task
static1
Behavioral task
behavioral1
Sample
409aa00a50156d29c88da17e5154ac79_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
409aa00a50156d29c88da17e5154ac79_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
409aa00a50156d29c88da17e5154ac79_JaffaCakes118
Size
390KB
MD5
409aa00a50156d29c88da17e5154ac79
SHA1
e1da9ddf69c8c2bd907f6c1b532da6b6b29697bf
SHA256
01c2521d813ed2ec8d1e2949fc9504bb941cd5a31d7750ea1d479b8cf6904123
SHA512
80765ed1c31e54166632a57b68e358bcbdeb059945e2ce147eb944c8812e0d0b87cf2ce761d4579b6e71481c3bade1e84e52c1f52a364e7511f18ec31a8b1c1b
SSDEEP
768:zElcJzXDVQ9IMlsW+iKSCYIzQW8/oe/BQXw60C/fGyYA3rX:QlcpVQVlq4Izm/p7CGyVbX
Checks for missing Authenticode signature.
resource |
---|
409aa00a50156d29c88da17e5154ac79_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryA
ReleaseMutex
GetLastError
VirtualFreeEx
WaitForSingleObject
VirtualAllocEx
FindClose
FindNextFileA
lstrcmpiA
lstrcpyA
lstrcatA
GetCurrentProcess
WriteFile
GetModuleHandleA
SetFileTime
GetFileTime
CreateMutexA
FindResourceA
SizeofResource
LoadResource
CreateFileA
DeleteFileA
MoveFileExA
CopyFileA
GetModuleFileNameA
CloseHandle
GetCurrentProcessId
Sleep
wsprintfA
SetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
RegSetValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
RegCloseKey
StrStrIA
MakeSureDirectoryPathExists
free
strncat
memset
_beginthreadex
strcmp
??2@YAPAXI@Z
strstr
CoGetComCatalog
GetName
GetRPCSSInfo
ServiceMain
WhichService
_GetName@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ