ServiceRouteExA
StartServiceEx
StopServiceEx
Static task
static1
Behavioral task
behavioral1
Sample
41938064ade936118703300ef491a22e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41938064ade936118703300ef491a22e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
41938064ade936118703300ef491a22e_JaffaCakes118
Size
13KB
MD5
41938064ade936118703300ef491a22e
SHA1
711a6f7cd5c00bce44601e5d6aaf90979cc2259e
SHA256
c088b117529a032470789c01ad80f8529885b29431a0edb037011bc2d39bcd9b
SHA512
84991b931b8dba4256cf4e651301214a49e384f37f16f2132531a9b8cd7bf34555d7f1c9051d73d5653e800890398b949b64ba524caf32c9095dacc5d7125787
SSDEEP
192:bt5/ZuvSNwYW1QpJI7HQuFu8oiKNhuBBQ6PRQkf2DoQ8ex2DMo:btxZuvSZWlsuF8huBBQARQkfyxX
Checks for missing Authenticode signature.
resource |
---|
41938064ade936118703300ef491a22e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
strlen
RtlZeroMemory
strcpy
memcmp
memcpy
VirtualAlloc
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteProcessMemory
VirtualQueryEx
CloseHandle
CreateFileA
CreateThread
GetCurrentProcess
GetCurrentProcessId
GetExitCodeThread
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
ReadFile
ReadProcessMemory
Sleep
TerminateProcess
VirtualProtectEx
VirtualFree
GetWindowThreadProcessId
KillTimer
SetTimer
SetWindowLongA
SetWindowsHookExA
UnhookWindowsHookEx
GetWindowLongA
GetWindowTextA
EnumWindows
wsprintfA
CallNextHookEx
CallWindowProcA
send
gethostname
ServiceRouteExA
StartServiceEx
StopServiceEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ