DllInstall
ServiceMain
ldap_open
Static task
static1
Behavioral task
behavioral1
Sample
0fddacf29f04c2c1aa3be96261c36d2c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0fddacf29f04c2c1aa3be96261c36d2c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0fddacf29f04c2c1aa3be96261c36d2c_JaffaCakes118
Size
43KB
MD5
0fddacf29f04c2c1aa3be96261c36d2c
SHA1
502eba5608380649a3e3f28ec7abb68817ec1033
SHA256
329a9f600ebaa31bfc943a1878c8a3fba5e4c2703dd46883aba1d44a5939f50e
SHA512
6587346af4370f74b3fbf1b64cb79e7c49a93a851da3c1a700e4786d2588a5af73483bbb0704b262d3d78d77ccdf7fadf760aac861577ee99f742afceb04d27e
SSDEEP
768:MX6Ktbuqoflj41qp1pe1yEqpOJ8jkxRwpeMzt4Ly2LgguqbC1xAfnASD:Gtbuqoflj41qpviyK84xyezrvuh1xC9D
Checks for missing Authenticode signature.
resource |
---|
0fddacf29f04c2c1aa3be96261c36d2c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteObject
malloc
ShellExecuteA
capCreateCaptureWindowA
StrCmpW
ExitWindowsEx
RegCloseKey
GetModuleFileNameExA
ImmReleaseContext
CreateStreamOnHGlobal
listen
waveInUnprepareHeader
DllInstall
ServiceMain
ldap_open
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE