frtesfwr
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2c78485ed9d303a530cdb9e61c8ec8ba_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c78485ed9d303a530cdb9e61c8ec8ba_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2c78485ed9d303a530cdb9e61c8ec8ba_JaffaCakes118
Size
38KB
MD5
2c78485ed9d303a530cdb9e61c8ec8ba
SHA1
f45276a81d2f5177cab178e9eee80df337e82f00
SHA256
670534739d679f72f66546d440704da4bd27b4124dcaae347fbb1403e960d796
SHA512
7f1745db251b2300c916c6f2d0f98a67e95d2619c28025475836d0a35b5e1c8518d591dd897843387deb0b29abf04ae6c04a750b6e9ae8fe0dee3b80e1f48ec1
SSDEEP
768:gz4TogBLYrcl0tnfX5Oz9miP826Ae6+/q6NNEGCy/D:jTVGcl0tnfX5OkAlBebqKEGCy/D
Checks for missing Authenticode signature.
resource |
---|
2c78485ed9d303a530cdb9e61c8ec8ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
strrchr
ExitWindowsEx
CreateStreamOnHGlobal
listen
StrRChrA
ImmReleaseContext
waveInUnprepareHeader
capCreateCaptureWindowA
ShellExecuteA
GetDIBits
RegCloseKey
GetModuleFileNameExA
frtesfwr
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE