Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
4ca1c2010684b34f9c11f1b8d5fc8f5b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4ca1c2010684b34f9c11f1b8d5fc8f5b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4ca1c2010684b34f9c11f1b8d5fc8f5b_JaffaCakes118
Size
41KB
MD5
4ca1c2010684b34f9c11f1b8d5fc8f5b
SHA1
9d4fe198a379841e14c9525136ca4c060f555141
SHA256
41095badabd28f6f9cfa98a75cdb51a294053018f4326e93d8789160666b03c2
SHA512
e0303e6f8d888b02559bef72b759a279dcee3e5f7c4ebf5fc193ed7aa5de3515268c61df329fa3f662d3831b56e20690ad3287b74e9c1aaf6da635bee51de2f3
SSDEEP
768:FRtI+vuGnY6AlX/99zAayjoQH+JWlcmAfQ0OieD1lZgCpx:PjGGnLAlP7AP0qiCjAtOieLGCpx
Checks for missing Authenticode signature.
resource |
---|
4ca1c2010684b34f9c11f1b8d5fc8f5b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
RegCloseKey
IsWindow
listen
GetModuleFileNameExA
waveInStop
BitBlt
CreateStreamOnHGlobal
ImmGetContext
capCreateCaptureWindowA
free
ShellExecuteA
StrChrA
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE