Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
aef85b57144eafc7f714ac479a6ffe5b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
aef85b57144eafc7f714ac479a6ffe5b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aef85b57144eafc7f714ac479a6ffe5b_JaffaCakes118
Size
41KB
MD5
aef85b57144eafc7f714ac479a6ffe5b
SHA1
136d4acdb573b949980cf2a598b235e0659fe906
SHA256
2d6eeb3c04d9ef7921d0b12f330b17c29a3357b6f974b7e4e0e1161ad5b05c6d
SHA512
5d2189960a3d2d8122982ba67fe269ba242f3b7d606165a44689b4a489238c80bb713f95335911fdbea3c2fd1c189fe4236c7cb03c76f42f438c7d3930d7b70d
SSDEEP
768:79ASu+fPFFR+twkG2Ht7ZaWmldBbOMHnuqEXBcV5t6eDYYPZMz8o:6B+fPrQwp6tXUdBqMHnGuXt6elZMz8o
Checks for missing Authenticode signature.
resource |
---|
aef85b57144eafc7f714ac479a6ffe5b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleFileNameExA
RegCloseKey
listen
ImmGetContext
StrChrA
capCreateCaptureWindowA
BitBlt
IsWindow
waveInStop
free
CreateStreamOnHGlobal
ShellExecuteA
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE