guocyok888
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
0755996a0e8b5ec69c8088d97c53e5b0_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0755996a0e8b5ec69c8088d97c53e5b0_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0755996a0e8b5ec69c8088d97c53e5b0_JaffaCakes118
Size
44KB
MD5
0755996a0e8b5ec69c8088d97c53e5b0
SHA1
b07218d5835061027dd706264800e7b8ba049dac
SHA256
d9bc55bdc545c09c4d3b0bd1f79df60bb1d80bef69861cc9e49e354b7015a1d2
SHA512
f3a8c29b3c6f1639edb386837139b6af7fed60cc8731868b98c0438777b2a65e54f779fcc9bd18c5e7ae8289cddc7d1ed1e04be585c54cc649cba8c5c243eb46
SSDEEP
768:A4zBdsluj42UQVDb9HBReuYUrapvNDeuY4/pIfptVWUYfX0OORg326t63n:9zBdslj2Rtc1aUhY1W9BORg326t63n
Checks for missing Authenticode signature.
resource |
---|
0755996a0e8b5ec69c8088d97c53e5b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleFileNameExA
capCreateCaptureWindowA
ImmGetContext
waveInStop
free
ShellExecuteA
IsWindow
StrCmpW
BitBlt
RegCloseKey
CreateStreamOnHGlobal
listen
guocyok888
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE