ServiceHandler
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
5024029acdcec86f2a690dec59e07052_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5024029acdcec86f2a690dec59e07052_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
5024029acdcec86f2a690dec59e07052_JaffaCakes118
Size
88KB
MD5
5024029acdcec86f2a690dec59e07052
SHA1
36cfbd949ad6bea4bb8de4a6a5fdfc22346ca193
SHA256
ff59c2bdd2a17d1e02517a75fb97f35e253434248017282af4dbacbc3b474b4d
SHA512
a725b3f4c4776be1a6d8c9eb13dae77934d193b5d512d64e9eae9faf106a61125f434b9df0a19bf17c6debec134cd18fd2647de14ec469af9dfdf44b84b63585
SSDEEP
1536:EUXDWAe2JVASMybdm/TLokFs5vBmxP/IeTNU3qUXoRqwXuEXNoIGs:EAWOCvw5kP/ImxRqeXNoI
Checks for missing Authenticode signature.
| resource |
|---|
| 5024029acdcec86f2a690dec59e07052_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentProcess
SetFileTime
WriteFile
SetFilePointer
CloseHandle
GetFileTime
CreateFileA
GetLastError
GetFileSize
GetSystemTimeAsFileTime
DeviceIoControl
GetSystemDirectoryA
FindNextFileA
SetFileAttributesA
RemoveDirectoryA
CreateProcessA
LoadLibraryA
FindFirstFileA
FindClose
Sleep
GetSystemTime
DeleteFileA
WideCharToMultiByte
MultiByteToWideChar
ReadFile
lstrlenW
FlushFileBuffers
SetStdHandle
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetProcAddress
ExitWindowsEx
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
SetServiceStatus
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ