cdwertgyhq
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
5e33112184a35bd467320930a6fca101_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e33112184a35bd467320930a6fca101_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e33112184a35bd467320930a6fca101_JaffaCakes118
Size
43KB
MD5
5e33112184a35bd467320930a6fca101
SHA1
cfd3be8c044f9331e906eb01eb403cd801ffac44
SHA256
472a592cae360d885d7ee2d46d1d52a02aeb1f33ab7aaf04e34cb7c56207ecc2
SHA512
1de0c3dd6c0833970aefb69e7b76ef855c307df88e26e9d6e1e66b8ec2c278ad2458f08fd3cab07cf7c129e52991c4d999897dafa116ed354997f0a007161c76
SSDEEP
768:9zbtFzai3XPCHnZpleYJJFxSKaPwLg/hSA5gHK4LGtFrKoB+1:BbtB5Gn7leKJ21ug/kA5iKTv3u
Checks for missing Authenticode signature.
resource |
---|
5e33112184a35bd467320930a6fca101_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
capCreateCaptureWindowA
waveInUnprepareHeader
listen
strrchr
ExitWindowsEx
CreateStreamOnHGlobal
RegQueryValueExA
StrCmpW
ShellExecuteA
GetModuleFileNameExA
ImmReleaseContext
CreateCompatibleBitmap
cdwertgyhq
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE