thjmnbcxzz
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
5e9998e9d32940a8d59a97d54c15c7bc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e9998e9d32940a8d59a97d54c15c7bc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e9998e9d32940a8d59a97d54c15c7bc_JaffaCakes118
Size
45KB
MD5
5e9998e9d32940a8d59a97d54c15c7bc
SHA1
f712eec0b5bead43313da709d8db8612cfb0fc1b
SHA256
c38c8d99269c6ada9d5bb5ed090f61dcc8c90fbfb873804f2b86fb0f0c047115
SHA512
ac66616dcf613177d06758ef2f26834f313745c8b40647c84ca8cd01ccbf10a52218944e4e28195f2c48ca27b62721cbbf7769f8850c5877c9ce3c322f52756f
SSDEEP
768:U+745N1osMVujCFyFt/Z7YAPiJr1xHtSDD4qjllNBq3WrA1ImAemuKUgKVVaKS8L:X7453oFVu2yF/zPitsDDbrVr0ImHCmVP
Checks for missing Authenticode signature.
resource |
---|
5e9998e9d32940a8d59a97d54c15c7bc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ImmGetContext
BitBlt
capCreateCaptureWindowA
waveInStop
CreateStreamOnHGlobal
IsWindow
RegCloseKey
listen
StrCmpW
free
ShellExecuteA
GetModuleFileNameExA
thjmnbcxzz
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE