gytfredwse
ServiceMain
rftgyhujk
Static task
static1
Behavioral task
behavioral1
Sample
82ca481b88b546579c76832121d3aeb0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82ca481b88b546579c76832121d3aeb0_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
82ca481b88b546579c76832121d3aeb0_JaffaCakes118
Size
43KB
MD5
82ca481b88b546579c76832121d3aeb0
SHA1
233fd0e802c38f1ef64bd36ef27ed8341bd94fba
SHA256
e8870a639e0c984c10e669d4fedb2e5a72694b68060d927a13cbe9870de4c570
SHA512
1ec6c80eb46ab8ea9553028bca0ab439218f6a0cbf3c0fcee835d1f2412fb82e4c7d0607a22c710f70dbcacd443a1ea53b8b252f409a5d674b8687ff28a891cb
SSDEEP
768:DrugOBx2N+a91MqEakU5q7U2/ilnLwabrhNNcD3P6m:DrugC2SiyqBLplcT7
Checks for missing Authenticode signature.
resource |
---|
82ca481b88b546579c76832121d3aeb0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
waveInUnprepareHeader
StrCmpW
malloc
ImmReleaseContext
ExitWindowsEx
RegCloseKey
DeleteObject
ShellExecuteA
CreateStreamOnHGlobal
GetModuleFileNameExA
capCreateCaptureWindowA
listen
gytfredwse
ServiceMain
rftgyhujk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE