Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
18848583460f3ff21f6f95b1f3640fee_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18848583460f3ff21f6f95b1f3640fee_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
18848583460f3ff21f6f95b1f3640fee_JaffaCakes118
Size
39KB
MD5
18848583460f3ff21f6f95b1f3640fee
SHA1
67383f270cf03ac1cce0ccc55f3d60ccfcc67c41
SHA256
9aac4b66d9b766d864a45fe46f87f6c3c26c908bc9111bde2dd63a4c99c66644
SHA512
eb8243eb36dcdbdba8ec33fc0087f7de6185923af2f2cbdd0d2fdb4ab4401b35eb5d582b503465c30742f5e8911b3fa9d056bad8bab1482dad8c8725aeb9b44d
SSDEEP
768:DemQWJ4dKLP1ltsr2dKS27jMgTJ377jPUTvtMXGeCxXX0tAMNx5:DtQWgKj1grWw9RngT1M2eW4AMNx5
Checks for missing Authenticode signature.
resource |
---|
18848583460f3ff21f6f95b1f3640fee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
waveInStop
IsWindow
ImmGetContext
capCreateCaptureWindowA
StrChrA
RegCloseKey
ShellExecuteA
listen
GetModuleFileNameExA
CreateStreamOnHGlobal
BitBlt
free
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE