erdftgyhy
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4982bb6e3c4b50695eff8760973e96d3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4982bb6e3c4b50695eff8760973e96d3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4982bb6e3c4b50695eff8760973e96d3_JaffaCakes118
Size
41KB
MD5
4982bb6e3c4b50695eff8760973e96d3
SHA1
fbab648a4c8603eb3c983cc646112b1707fea930
SHA256
06f8f28ee80e9cbff789717aeabd0665c0e242046bdcc58416b6ae29e1a2b3cf
SHA512
87b3422fa9ae20bbd15a4e57b15ebedd66aea43467a291c1ce3e7d788c9a3a0d8b587736cc80a67f5dea99e0203d3bffefac78c4ec68a5ebcde379b87409a205
SSDEEP
768:p/4BJVXSR7KvdoopaUqxoEshAGt8PVJQjwkLoimXFeUxcjT+aJR:pw3VXRooIUEI3t0JQjwkLoimVeV+aJR
Checks for missing Authenticode signature.
resource |
---|
4982bb6e3c4b50695eff8760973e96d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
waveInStop
ShellExecuteA
IsWindow
RegCloseKey
CreateStreamOnHGlobal
BitBlt
StrChrA
GetModuleFileNameExA
ImmGetContext
listen
capCreateCaptureWindowA
free
erdftgyhy
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE