gytfredwse
ServiceMain
qwaszxerd
Static task
static1
Behavioral task
behavioral1
Sample
28befaaa2c8e2dd0e43b05ee2ab12ea5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28befaaa2c8e2dd0e43b05ee2ab12ea5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28befaaa2c8e2dd0e43b05ee2ab12ea5_JaffaCakes118
Size
43KB
MD5
28befaaa2c8e2dd0e43b05ee2ab12ea5
SHA1
9ad760d88b3d48b0accfb6f2ea233286bb57e391
SHA256
0b05fb112a3ba622d7614864b0f55b6dac27e8540bcee03c8d83eac92b7e311f
SHA512
40184d33c7a8caa86ad1a5e3fde80ccb1ce6532e00ba3ec5179b2fe1288624706e27063bc80498baca9ebccb7d55fac77022259f8fe50d67f519f65ccce5df38
SSDEEP
768:dr7saq35YjQbvoFH6/YD0DuElmib2I9FeY0S4asasLep6IqKFZ827aksMjQg:tsaqXyH6QDuoiaI9RjsLDpwC2O/Msg
Checks for missing Authenticode signature.
resource |
---|
28befaaa2c8e2dd0e43b05ee2ab12ea5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
malloc
waveInUnprepareHeader
ShellExecuteA
CreateStreamOnHGlobal
StrCmpW
ImmReleaseContext
GetModuleFileNameExA
ExitWindowsEx
listen
RegCloseKey
capCreateCaptureWindowA
DeleteObject
gytfredwse
ServiceMain
qwaszxerd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE