errtfrtfrt
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
2eaca16a885939ac7be4aa070c650d51_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2eaca16a885939ac7be4aa070c650d51_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2eaca16a885939ac7be4aa070c650d51_JaffaCakes118
Size
43KB
MD5
2eaca16a885939ac7be4aa070c650d51
SHA1
e02e28ff1c88489039a3faac48cfa643a9b04454
SHA256
6dd03c3d281408bcd8ae5e93321d6b7393e8758afa8a551db3838484b123bb45
SHA512
f329976fa04d6e62826409986cdf19ce5299e350c1bf0f5f5550228f4ac5d581edc4038a29de19b17f44a6443fd6ccb27740600ca3835077ebe12717045b42ed
SSDEEP
768:F0bGvJZAqbhKOQjWSxlBaJNQDSzj3XhbcOTdcVDxgfFaZ3dUXrHbkDkOZpSrXrHI:F0kZAqbhKL5BgQGnnhbhOGFi3K7HbiFZ
Checks for missing Authenticode signature.
resource |
---|
2eaca16a885939ac7be4aa070c650d51_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitWindowsEx
RegQueryValueExA
waveInUnprepareHeader
ShellExecuteA
ImmReleaseContext
strrchr
StrCmpW
listen
CreateStreamOnHGlobal
capCreateCaptureWindowA
GetModuleFileNameExA
CreateCompatibleBitmap
errtfrtfrt
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE