gytfredwse
ServiceMain
qwaszxerd
Static task
static1
Behavioral task
behavioral1
Sample
ae6868cd66d841458bc7c606042de3b9_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae6868cd66d841458bc7c606042de3b9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ae6868cd66d841458bc7c606042de3b9_JaffaCakes118
Size
49KB
MD5
ae6868cd66d841458bc7c606042de3b9
SHA1
4e514d05874a501ae9022d85daffe305a1a66f6d
SHA256
088ecd55d1bdae2dc20d4d0c0ae304a290aea1e73e50fd6e45b39f840b9a6ce6
SHA512
51dfd948410e4f96b0fc1edee79c966307312aa6eb8c55f904f1ff3bed7e5a282d806a1aa16efa68ae59c5c78b9045d8ddc9388037b505c9044f896175bf5ae3
SSDEEP
768:hOCeT0ZqD48IXNhKv+tjs8C/CaDOBAP5r3cEZ+kNJ7JiaIkHmS1z3YDam1bi:hOR0ZVDvHAO7BA9+krJGkG6Mar
Checks for missing Authenticode signature.
resource |
---|
ae6868cd66d841458bc7c606042de3b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetModuleFileNameExA
RegCloseKey
waveInUnprepareHeader
ExitWindowsEx
DeleteObject
CreateStreamOnHGlobal
StrCmpW
ShellExecuteA
ImmReleaseContext
malloc
capCreateCaptureWindowA
listen
gytfredwse
ServiceMain
qwaszxerd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE