ServiceMain
DoService
DoMainWork
Static task
static1
Behavioral task
behavioral1
Sample
2e4f7fdfa945239925b4bcb0f5416a0e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2e4f7fdfa945239925b4bcb0f5416a0e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e4f7fdfa945239925b4bcb0f5416a0e_JaffaCakes118
Size
44KB
MD5
2e4f7fdfa945239925b4bcb0f5416a0e
SHA1
9254a42d8364f644ff4bf3695a2db17cda1587da
SHA256
a23edeba88039cc3592c22b345c89efcd6a5a9049a6f70f0ba69a5e2e1057338
SHA512
a33b3dae9798da71450fef2c5c9ec97854cfc2c5ddeb4bd399ceb9bac663b49545a64ab05b139a700a2285b7ff08d98c79b1aff0706864be36d4398e9f019882
SSDEEP
768:Xb9ojTHlF9/+cfvaooY69qbOnrt1ApoFInLcCYtX0lR6J83R26D:RojL9GiSooY64Onrt1KZnLcNErUi
Checks for missing Authenticode signature.
resource |
---|
2e4f7fdfa945239925b4bcb0f5416a0e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ShellExecuteA
BitBlt
waveInStop
SetTimer
CreateStreamOnHGlobal
RegCloseKey
listen
StrCmpW
GetModuleFileNameExA
capCreateCaptureWindowA
ImmGetContext
free
ServiceMain
DoService
DoMainWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE