FuckNod
Install
RundllInstall
RundllUninstall
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_40dbdc956e6b9106401160b10845bc1a.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_40dbdc956e6b9106401160b10845bc1a.dll
Resource
win10v2004-20241007-en
Target
JaffaCakes118_40dbdc956e6b9106401160b10845bc1a
Size
48KB
MD5
40dbdc956e6b9106401160b10845bc1a
SHA1
a32601371ad74b5ad3eb97ec457cb5c17403457b
SHA256
d8bfa58ef3d69b90767c3bdcb36d8bcf66c84aea72a4c6c36fa0179d0095805f
SHA512
a7a5449d806a31be806cbb1937bcae074bf31fd923df3405f0b0835975783edf5e522ac0819b8b8e651eb1e44bb818bb48fd0b88e55ee1554f0c0ad894c69a00
SSDEEP
768:u09PZYWaCHCu7wL2zeIHDZzKUwpQhyEIABsDtFLR7NXWjgIuL:uurBHzG2zvD0UwQywBOBR7NXWjF
Checks for missing Authenticode signature.
| resource |
|---|
| JaffaCakes118_40dbdc956e6b9106401160b10845bc1a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
DeleteFileA
CopyFileA
MoveFileA
GetCurrentProcess
WinExec
SetLastError
lstrlenA
Process32Next
GetPriorityClass
OpenProcess
Module32First
Process32First
CreateToolhelp32Snapshot
TerminateProcess
lstrcpyA
WaitForSingleObject
CreateThread
lstrcpynA
GetLastError
GetModuleFileNameA
GetTickCount
SetThreadPriority
GetCurrentThread
GetFileSize
CreateFileA
WriteFile
FreeConsole
GlobalMemoryStatus
GetVersionExA
GetComputerNameA
InterlockedExchange
HeapAlloc
GetProcessHeap
GetCurrentProcessId
GetCurrentThreadId
Sleep
FindNextFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
CreatePipe
GetStartupInfoA
GetSystemDirectoryA
CreateProcessA
RaiseException
LocalAlloc
CloseHandle
ReadFile
MoveFileExA
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetDIBits
DeleteDC
DeleteObject
SHGetFileInfoA
ShellExecuteA
strcat
strcpy
sprintf
strncpy
strcmp
strlen
??2@YAPAXI@Z
__CxxFrameHandler
_EH_prolog
_CxxThrowException
_except_handler3
realloc
malloc
free
atoi
strcspn
strstr
??3@YAXPAX@Z
_ftol
wcstombs
rand
srand
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
strncat
memset
memcpy
_strlwr
calloc
capGetDriverDescriptionA
capCreateCaptureWindowA
FuckNod
Install
RundllInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ