gytfredwse
ServiceMain
rftgyhujk
Static task
static1
Behavioral task
behavioral1
Sample
8700001f3e95375646e259ae2ecc8b32_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8700001f3e95375646e259ae2ecc8b32_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8700001f3e95375646e259ae2ecc8b32_JaffaCakes118
Size
46KB
MD5
8700001f3e95375646e259ae2ecc8b32
SHA1
f66819cfffd589a249f9f61c7524eb624510e6ae
SHA256
2ea781cab36bf35bcd1b5bd029994e9a29777eed3aad7834b2e40442352144f5
SHA512
d724ff95b6366e7ef119ddf72ef65b04ab7971191b8b99b17c840d0e5ba5c25528042c3666279957ccfee1f706c829afcbaa4435cb23aea39a62f865a1a25f71
SSDEEP
768:IFJSVdOChuUnacEFGV9BNG6pSyGnSawKG97rniZJmFFDBRCvLrYPiW9w8EAKNsXo:IF1I7a/GzvG6AnSawt5rAJmbAL7Rs4
Checks for missing Authenticode signature.
resource |
---|
8700001f3e95375646e259ae2ecc8b32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
waveInStop
listen
free
ImmGetContext
RegCloseKey
ShellExecuteA
StrCmpW
CreateStreamOnHGlobal
GetModuleFileNameExA
capCreateCaptureWindowA
SetTimer
BitBlt
gytfredwse
ServiceMain
rftgyhujk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE