gytfredwse
ServiceMain
rftgyhujk
Static task
static1
Behavioral task
behavioral1
Sample
2739dd3f3fec93a4f8c7cbf53e978145_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2739dd3f3fec93a4f8c7cbf53e978145_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2739dd3f3fec93a4f8c7cbf53e978145_JaffaCakes118
Size
43KB
MD5
2739dd3f3fec93a4f8c7cbf53e978145
SHA1
9abb09ead036d30edf7cbc930a0a031f8f0bd707
SHA256
b1a9d2bdd99827dc979ecf9acb92a35d8565a6607043413de03aed6ca7580d1a
SHA512
3b16ed191130e00961283bcb76d16a4d4750c1736e48bd2763f44503b62f2b84ca642f6216f05334a246c7a4d6a2ee02d2647c5d99965456a3f21f1639d026db
SSDEEP
768:2oXxpnrmZIRUI4olpnr/0y4H7fqLk6q5aWLHflAgs06WJr5xEjbKcdLvr5xEjb0:2oXxpnrmZIWdcAye+kL5RLNR6KjE7dP3
Checks for missing Authenticode signature.
resource |
---|
2739dd3f3fec93a4f8c7cbf53e978145_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ShellExecuteA
ExitWindowsEx
CreateStreamOnHGlobal
GetModuleFileNameExA
malloc
RegCloseKey
listen
ImmReleaseContext
waveInUnprepareHeader
DeleteObject
StrCmpW
capCreateCaptureWindowA
gytfredwse
ServiceMain
rftgyhujk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE