DllInstall
ServiceMain
ldap_open
Static task
static1
Behavioral task
behavioral1
Sample
d728890b50cfea6344bbc98e1d728365_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d728890b50cfea6344bbc98e1d728365_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d728890b50cfea6344bbc98e1d728365_JaffaCakes118
Size
43KB
MD5
d728890b50cfea6344bbc98e1d728365
SHA1
fdd39cea424dc52f3ed6f2eee8a6f11e73fe741f
SHA256
87aab687f543edd87e3e9d778ca36029d9b13e1cc8e9faf584d323d8b40f5465
SHA512
bffdad59411d5ac2287d1ff142de3770d4fd690b3f26ac696471cfbb55976aac4e7103059ecd7c4816e5b1c3269724d8a0f236d6f701ae58407d06f9916c4f02
SSDEEP
768:GwjTMXIlRR2mSWzArE2fqej/QUOROQV/hjagV1XzTCm8Z0ubawL9AnQhHkxLxeU+:ljTfln3Shrbfqej4Ut29V1DTqZ0uDLuc
Checks for missing Authenticode signature.
resource |
---|
d728890b50cfea6344bbc98e1d728365_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ImmReleaseContext
GetModuleFileNameExA
capCreateCaptureWindowA
StrCmpW
ShellExecuteA
RegCloseKey
ExitWindowsEx
waveInUnprepareHeader
listen
malloc
DeleteObject
CreateStreamOnHGlobal
DllInstall
ServiceMain
ldap_open
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE