frtesfwr
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
40a4a198f6d6832ace15d8a3020cdc2c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40a4a198f6d6832ace15d8a3020cdc2c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40a4a198f6d6832ace15d8a3020cdc2c_JaffaCakes118
Size
39KB
MD5
40a4a198f6d6832ace15d8a3020cdc2c
SHA1
ab061e9b87881b116e98601b7c77a94e1b5eb1f6
SHA256
6f2d5dbf197996308c5935dfa79062c2185f7d7462581d060d4b814058685af7
SHA512
8dcc92f353b57ef66ef068bf2c85bcba414e2f4fc76f2d7888b82c7af44ae4e5ef3f39fbdcc7606ccdfb283657710d364e92d9f932d78d6c299e91be95f1f72a
SSDEEP
768:wMPeTzKOL1dhit1w6cSZPEyDQOWJvmsGeZbgp5lMMYU:wMPGKI1bitiWPE9hGe6p5lMMYU
Checks for missing Authenticode signature.
resource |
---|
40a4a198f6d6832ace15d8a3020cdc2c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
listen
ExitWindowsEx
StrRChrA
CreateStreamOnHGlobal
GetModuleFileNameExA
ImmReleaseContext
waveInUnprepareHeader
strrchr
GetDIBits
capCreateCaptureWindowA
RegCloseKey
ShellExecuteA
frtesfwr
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE