DllInstall
ServiceMain
ldap_open
Static task
static1
Behavioral task
behavioral1
Sample
48c959b9bcfa8f03b04b4ab093d0d285_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48c959b9bcfa8f03b04b4ab093d0d285_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
48c959b9bcfa8f03b04b4ab093d0d285_JaffaCakes118
Size
44KB
MD5
48c959b9bcfa8f03b04b4ab093d0d285
SHA1
cfda8e685423c0f9d8113adcd9d765102633843a
SHA256
e467d64f4f43eb919fc6ff98cc9772b3a7fcbfc144b9de3a888c873ce66dffc4
SHA512
218dff1fa3100a252815b54e826f7e33745c7f4b8519f2d5a91366ad62bd046167288fcece5046c814c3af664a064b815096d8ad9597f89a5943c391ac25d8b5
SSDEEP
768:LNXEMHlPo3u8Egbkfz2TxIWVaHAf29yFIB7hbDu47T2ytIF3uDS1uGWASURo0RtG:5X7lPkuX8xb4UGh24PZiF3uynWAhRo0y
Checks for missing Authenticode signature.
resource |
---|
48c959b9bcfa8f03b04b4ab093d0d285_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ShellExecuteA
StrCmpW
waveInUnprepareHeader
RegCloseKey
ImmReleaseContext
DeleteObject
capCreateCaptureWindowA
CreateStreamOnHGlobal
malloc
ExitWindowsEx
listen
GetModuleFileNameExA
DllInstall
ServiceMain
ldap_open
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE