guocyok888
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
f2dd6e66135acbda63b1b8b15a8536cc_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2dd6e66135acbda63b1b8b15a8536cc_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f2dd6e66135acbda63b1b8b15a8536cc_JaffaCakes118
Size
44KB
MD5
f2dd6e66135acbda63b1b8b15a8536cc
SHA1
58e24b14b5e1b8f42526c744cf3940a21914d413
SHA256
4219162108e3f2e06275036d192bd2b78b042c60d68714ec0bf2d2685ca58ca1
SHA512
608065faa367c64efbb293d3dd2e52fcceb5b3fddab78387b1de56eb88fae951870ff6b927901492be242b51738e8ec8f8dc4a5254d07252cad8887c705fd7ff
SSDEEP
768:ecMOUIHUKtTRulWDHcZ1Rj9KbpVSYWBBBRtfVBPX0YiQEIEM:e2jt4lWu1JobpVVWBB7tfriQEIEM
Checks for missing Authenticode signature.
resource |
---|
f2dd6e66135acbda63b1b8b15a8536cc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
StrCmpW
ImmGetContext
GetModuleFileNameExA
CreateStreamOnHGlobal
capCreateCaptureWindowA
waveInStop
ShellExecuteA
free
IsWindow
RegCloseKey
BitBlt
listen
guocyok888
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE