Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
36a1ad0539557186025d4d00b629a99c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36a1ad0539557186025d4d00b629a99c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36a1ad0539557186025d4d00b629a99c_JaffaCakes118
Size
41KB
MD5
36a1ad0539557186025d4d00b629a99c
SHA1
223e9cd90b4b17ec25811caac668e60cad77d6bc
SHA256
705e4f04d0e9d8aed36c0be372d7b83ef474c21fb4724add95e20d8eb95f68c3
SHA512
606e65e64324139c643ef6adde73e7aa978cddcb55aa7f37da99fceb9f3eb8c9481314fc21c2e1420c3a046acbe19ef395decfcf80ed1435b7f3da590c4f9c47
SSDEEP
768:79ASu+fPFFR+twkG2Ht7ZaWmldBbOMHnuqEXBcV5t6eDYYYcMMNV:6B+fPrQwp6tXUdBqMHnGuXt6e6cMMNV
Checks for missing Authenticode signature.
resource |
---|
36a1ad0539557186025d4d00b629a99c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleFileNameExA
RegCloseKey
listen
ImmGetContext
StrChrA
capCreateCaptureWindowA
BitBlt
IsWindow
waveInStop
free
CreateStreamOnHGlobal
ShellExecuteA
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE