DllInstall
ServiceMain
ldap_open
Static task
static1
Behavioral task
behavioral1
Sample
2d91249179d658484c5e0d300006b9c6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d91249179d658484c5e0d300006b9c6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d91249179d658484c5e0d300006b9c6_JaffaCakes118
Size
43KB
MD5
2d91249179d658484c5e0d300006b9c6
SHA1
046b81742e152f83dcfe52acda7f8675205d6cff
SHA256
93b473de4e0401ebccc2e7f6a3fcccaf0a42de62f6de554cb8a77a4b70d0dbbd
SHA512
58d5c060ceb30c2a533b7279caaffe5a58a33b53684b4e8cb34a1b7ab4e208fb3d275077ff5afb79e388cec14b4b981b709178a79f1ee55a728cdf7a252aca9f
SSDEEP
768:MX6Ktbuqoflj41qp1pe1yEqpOJ8jkxRwpeMzt4Ly2LgguqbC1qz9f32q46wD32qj:Gtbuqoflj41qpviyK84xyezrvuh1qz94
Checks for missing Authenticode signature.
resource |
---|
2d91249179d658484c5e0d300006b9c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DeleteObject
malloc
ShellExecuteA
capCreateCaptureWindowA
StrCmpW
ExitWindowsEx
RegCloseKey
GetModuleFileNameExA
ImmReleaseContext
CreateStreamOnHGlobal
listen
waveInUnprepareHeader
DllInstall
ServiceMain
ldap_open
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE