Install
Launch
ServiceMain
UnInstall
Behavioral task
behavioral1
Sample
JaffaCakes118_8a6c314a1d028daf95e25a0b3691e548.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8a6c314a1d028daf95e25a0b3691e548.dll
Resource
win10v2004-20250314-en
Target
JaffaCakes118_8a6c314a1d028daf95e25a0b3691e548
Size
612KB
MD5
8a6c314a1d028daf95e25a0b3691e548
SHA1
c6f0e702cfb98f700295c81580eaf6083887e2bb
SHA256
387bae8a92730a68456eee65d2c6e714fb2e3ffedf23e34d4398e6315cfbb16f
SHA512
d498f22fa8821285167435d533296dee43e4de0cfaa8585f32086860b4b6eda658743c9e0834e8f637e7545347c901e4f8fce2bd0032eb3a512dc71854ac7789
SSDEEP
12288:x7O9KBiABbqtPU/oAhfejKHdTt2EMzgbGT:ZvN5DftqzkST
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_8a6c314a1d028daf95e25a0b3691e548 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
inet_ntoa
InternetOpenW
StrStrW
ImmGetCompositionStringW
mixerSetControlDetails
GetModuleFileNameExW
CreateEnvironmentBlock
GetModuleHandleA
GetModuleHandleA
GetProcAddress
VirtualProtect
SetWindowsHookExW
BitBlt
CreateServiceW
ShellExecuteExW
CoInitialize
SysFreeString
Install
Launch
ServiceMain
UnInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ