DoMainWork
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
3f2873fa9ed6edb98227a55330e82e72_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f2873fa9ed6edb98227a55330e82e72_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f2873fa9ed6edb98227a55330e82e72_JaffaCakes118
Size
34KB
MD5
3f2873fa9ed6edb98227a55330e82e72
SHA1
c86a0ec384ec2b5db97ceeb4e3540d4c9f2c28b4
SHA256
f322096cb19ed4df90199e9d34c96d684082f2402a8972bca176646e9a862d43
SHA512
ed573ef74bfb120491074dbf588b585f8d227007a6ea5b3d7b4b7eb92b83d3721e190a9c22c1c34c42f2a10e1e3b4ea15ec81f1d524fddf2e8cea43ae792d285
SSDEEP
384:ZheviQVoDHVLqSTrUIUJAXJVhYOsYpoY1X1DUxszy4J5LCiGIBN82QAICnnJ9R6N:DL+wNLV2OZmszyY4kKunpohyJWAEM
Checks for missing Authenticode signature.
resource |
---|
3f2873fa9ed6edb98227a55330e82e72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitWindowsEx
DeleteObject
RegCloseKey
ShellExecuteA
CreateStreamOnHGlobal
listen
StrCmpW
GetModuleFileNameExA
ImmReleaseContext
capCreateCaptureWindowA
waveInUnprepareHeader
strrchr
DoMainWork
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE