erdftgyhy
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
466fbdf8bc8e2c6cd6b212faa4b2c64a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
466fbdf8bc8e2c6cd6b212faa4b2c64a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
466fbdf8bc8e2c6cd6b212faa4b2c64a_JaffaCakes118
Size
41KB
MD5
466fbdf8bc8e2c6cd6b212faa4b2c64a
SHA1
9480ee3269ad662b6af28486a54133a831932ca8
SHA256
7047ec9782a67045e1acfb1e481e094173b71fd86a0dbef03b4da3d080f37281
SHA512
fe9401068fb08cce42727fc0ecbf495dce16e9e2e971e53f6ec05bfb919025aef363334a59c88399f084f75509709b8ada24f317a079ef491df1d87d72391700
SSDEEP
768:LKBI0BlNyY3qe5WaldMaom2H1n4TndKKKu7eZlURsLkQ:Lmrt3qhwdMahU4TndRKu7esRsLkQ
Checks for missing Authenticode signature.
resource |
---|
466fbdf8bc8e2c6cd6b212faa4b2c64a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ImmGetContext
capCreateCaptureWindowA
free
BitBlt
CreateStreamOnHGlobal
waveInStop
listen
StrChrA
ShellExecuteA
IsWindow
RegCloseKey
GetModuleFileNameExA
erdftgyhy
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE