guocyok888
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
88e5782dbe26fae246c5c2e766daf819_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88e5782dbe26fae246c5c2e766daf819_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
88e5782dbe26fae246c5c2e766daf819_JaffaCakes118
Size
44KB
MD5
88e5782dbe26fae246c5c2e766daf819
SHA1
ef541b870fdb2fd315e78e5a619e594387e1ba5f
SHA256
c1a4c7777a3e002e466af4665f33a802f3a732e817fbad32e8ab102883bf9f5a
SHA512
188963ddc973f9fd1ad937d8c7bf7445938951364a40454c1fc4e5d01eb2b4acf23482c9679343eaf3171e08586a996a5293dd5c95592942c8a4ab86fb607f13
SSDEEP
768:fG4Iv3P9/EaCwmc73oUpiORvPTsBB4evgiwv0GbX0deKjM5tj9SvNK5nbC9SC:fvIfl/Eju74bSteYrZKoUFK1bvC
Checks for missing Authenticode signature.
resource |
---|
88e5782dbe26fae246c5c2e766daf819_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ImmGetContext
GetModuleFileNameExA
IsWindow
free
BitBlt
RegCloseKey
ShellExecuteA
listen
CreateStreamOnHGlobal
StrCmpW
capCreateCaptureWindowA
waveInStop
guocyok888
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE