tgyhuji488
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
72ec3dcd5d1285dc054f05380168375c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72ec3dcd5d1285dc054f05380168375c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
72ec3dcd5d1285dc054f05380168375c_JaffaCakes118
Size
43KB
MD5
72ec3dcd5d1285dc054f05380168375c
SHA1
aeaca8e9979c4e3d6c7c7bda60045a2672edefcf
SHA256
c4f85b7560919e64d14f6d4437ec4bbf4d1e58ddfbaee86d60986de927cdceba
SHA512
bc2561ca998e9439ffd0bad94fcb36c50d51b63a21ead05f3c6f8a0139bdb945127afa574347b0fad7ce005bd0dcc687350304f8017bfb6af2662c1cfd5e09b8
SSDEEP
768:lp1FZuJttdcp60f2yKq8/Zuy1W6dUWmTCe/SGgL+/PIIE4gVGPII/:lp3wBdcp60f2Z/ZF1W68TC9xqk50
Checks for missing Authenticode signature.
resource |
---|
72ec3dcd5d1285dc054f05380168375c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ImmReleaseContext
ExitWindowsEx
capCreateCaptureWindowA
waveInUnprepareHeader
strrchr
CreateStreamOnHGlobal
CreateCompatibleBitmap
GetModuleFileNameExA
RegQueryValueExA
ShellExecuteA
listen
StrCmpW
tgyhuji488
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE