Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
88081ea0ddfc9c8a371f021a1c096f0b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88081ea0ddfc9c8a371f021a1c096f0b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
88081ea0ddfc9c8a371f021a1c096f0b_JaffaCakes118
Size
41KB
MD5
88081ea0ddfc9c8a371f021a1c096f0b
SHA1
b9027cdb1563fc8fe3100d9c6e0599fcaacacb16
SHA256
8cd884683f5f9edf659c2603b87a0eb67b4530969def5cf51f440f69eccee7a8
SHA512
97d9864da4386f6269cc422e5cd83c8a1160b6323cb274edbafadcc8e571cf5a229ff0fb7a5458b632c555534e7d077f34d4866042a64fa017999e755a786f7a
SSDEEP
768:4RtIUBI0BqNuRzFmU1U6W/KhFFDIaigne+qZvMyKi:M9Awu6hrnneXvMyKi
Checks for missing Authenticode signature.
resource |
---|
88081ea0ddfc9c8a371f021a1c096f0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
BitBlt
listen
ImmGetContext
capCreateCaptureWindowA
waveInStop
free
RegCloseKey
GetModuleFileNameExA
ShellExecuteA
StrChrA
CreateStreamOnHGlobal
IsWindow
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE