gytfredwse
ServiceMain
rftgyhujk
Static task
static1
Behavioral task
behavioral1
Sample
26f8133027fdd79c78c2f7cebeead620_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26f8133027fdd79c78c2f7cebeead620_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
26f8133027fdd79c78c2f7cebeead620_JaffaCakes118
Size
43KB
MD5
26f8133027fdd79c78c2f7cebeead620
SHA1
f93403047e5c41d72bcfa98d9ea7930b8a962f64
SHA256
53518a7cd69cb6e3cfd2476df0c664514c16c15631d5a7c38d88894d5943962b
SHA512
71308786bc0d4d8b929104e08be53f619d5162cea79a0ac63f4e8ce9ad3e71af1e67e3bb898ded4427cade630b45133270abfaf700fcad2a4ac1887a4b78fe57
SSDEEP
768:SzA7x2W8YI5axaSltEzm7mmMjoFK08IhskLqhcbD6NN3Tii7xdQPSwg1:KAw/P5axaj9mM9PIhskLqYK3TNxdB1
Checks for missing Authenticode signature.
resource |
---|
26f8133027fdd79c78c2f7cebeead620_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitWindowsEx
ShellExecuteA
GetModuleFileNameExA
StrCmpW
waveInUnprepareHeader
CreateStreamOnHGlobal
listen
RegCloseKey
DeleteObject
capCreateCaptureWindowA
ImmReleaseContext
malloc
gytfredwse
ServiceMain
rftgyhujk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE