cdwertgyhq
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
78842efc26eb4098041b1bc1d1c5dd54_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
78842efc26eb4098041b1bc1d1c5dd54_JaffaCakes118.dll
Resource
win10v2004-20240729-en
Target
78842efc26eb4098041b1bc1d1c5dd54_JaffaCakes118
Size
43KB
MD5
78842efc26eb4098041b1bc1d1c5dd54
SHA1
0d0822eddd3f53dbc16eca304023b43ca0bc19af
SHA256
41e459f867c7dede949f18eee47583e3e2f6e7e3fae3baf6593050885fcc29a7
SHA512
21fccfa6e46704fc87540c52b32088fac6d4cb99805fe6c9dbde5e32deba24f5f3a5e2ac3dc0b2c162a13d9c5c365ddfbbed847e1b83cc43f2e5cd8f4cb17906
SSDEEP
768:9zbtFzai3XPCHnZpleYJJFxSKaPwLg/hSA5gHK4LGF5F95Ipuba9/epW:BbtB5Gn7leKJ21ug/kA5iKTFZ5he/F
Checks for missing Authenticode signature.
resource |
---|
78842efc26eb4098041b1bc1d1c5dd54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
capCreateCaptureWindowA
waveInUnprepareHeader
listen
strrchr
ExitWindowsEx
CreateStreamOnHGlobal
RegQueryValueExA
StrCmpW
ShellExecuteA
GetModuleFileNameExA
ImmReleaseContext
CreateCompatibleBitmap
cdwertgyhq
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE