DllInstall
ServiceMain
ldap_open
Static task
static1
Behavioral task
behavioral1
Sample
6f57524a6fc7eebdbd8f9f555d13d3b5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f57524a6fc7eebdbd8f9f555d13d3b5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f57524a6fc7eebdbd8f9f555d13d3b5_JaffaCakes118
Size
43KB
MD5
6f57524a6fc7eebdbd8f9f555d13d3b5
SHA1
5b9c0469224062f36675e631bdd88b7e3eb90df0
SHA256
b3edfb4ab3595ca10e893e602e381e93cf5f8736f0022d6cc8f758d4f6e51cbe
SHA512
9c41c3a79a5ca06e8b6288e25b8673cf855488641faa0c7c9355684810c162ef7fa6ee287a12ec5a25c3adba2cf42756573fdb5eefa51b58af26e22492886a08
SSDEEP
768:JxLJGy7pCoUlhuajwYvDgcICZi47hvuVnmQIKNvAl5ZahglC6Tcw6lO:JN7pCoaYaMYrgihvuAxIsH1CO
Checks for missing Authenticode signature.
resource |
---|
6f57524a6fc7eebdbd8f9f555d13d3b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CreateStreamOnHGlobal
listen
StrCmpW
ImmReleaseContext
ShellExecuteA
capCreateCaptureWindowA
RegCloseKey
waveInUnprepareHeader
malloc
GetModuleFileNameExA
ExitWindowsEx
DeleteObject
DllInstall
ServiceMain
ldap_open
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE