frtesfwr
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
388c4a3569a7b3e71e31defc72ada3be_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
388c4a3569a7b3e71e31defc72ada3be_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
388c4a3569a7b3e71e31defc72ada3be_JaffaCakes118
Size
39KB
MD5
388c4a3569a7b3e71e31defc72ada3be
SHA1
ff39a2a38024b1206a7ed28d00d2406eb3b6ad10
SHA256
311f5b5d53849ceee03ed7795bc399e7037fbd8949d4779fe9103bf4814442c3
SHA512
ed4909feef82804283fae7a79f10565600ad7140c064fa362c985f61c216eea5c9b69aae94e674873375bea5b2fc539c4d48b70b8f31bc0cc266e49192c75c5a
SSDEEP
768:u8+xZ+434ZnQpQmJM2BykSZmpF0yVUECg9KStwDQRNfueqz7IKFZ85nMTSq:u82c434xQp/qkS4pLzzEuNfue8IwC5nw
Checks for missing Authenticode signature.
resource |
---|
388c4a3569a7b3e71e31defc72ada3be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegCloseKey
GetModuleFileNameExA
GetDIBits
CreateStreamOnHGlobal
StrRChrA
ExitWindowsEx
listen
ImmReleaseContext
capCreateCaptureWindowA
waveInUnprepareHeader
ShellExecuteA
strrchr
frtesfwr
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE