MainService
MainWork
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
438afd45c335b773bb7f307319aaa8d9_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
438afd45c335b773bb7f307319aaa8d9_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
438afd45c335b773bb7f307319aaa8d9_JaffaCakes118
Size
63KB
MD5
438afd45c335b773bb7f307319aaa8d9
SHA1
65a47d0e9f1b71b52841b8aa28749f4534f38a23
SHA256
83d90426d604ef5345c9727ff7a7a68c1e14fb2364f2c8d602f6e7190c785d86
SHA512
093ce87c34fd75f3906c0f3845b9b4e480ca33d602032e00c14895c4e7d55dd1e3b68dbdc95fdeeac627244ed9db9619151836baba28669246fe78cc2be753f4
SSDEEP
1536:ZcIBgEKzzfG9X7rnmCAysK+eoeYYzxAAFsqbDBkc:ZcIBgEKzK9rrmusqLzWAyqfBkc
Checks for missing Authenticode signature.
resource |
---|
438afd45c335b773bb7f307319aaa8d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
SetDIBColorTable
WSACleanup
inet_addr
waveInUnprepareHeader
acmStreamUnprepareHeader
ShellExecuteA
InternetReadFile
URLDownloadToFileA
capGetDriverDescriptionA
ICCompressorFree
ImmReleaseContext
MainService
MainWork
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE