Qy001DoMainWSSK
222222222222
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
df3ba6bad6fea88a1fbd9752f3740495_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df3ba6bad6fea88a1fbd9752f3740495_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
df3ba6bad6fea88a1fbd9752f3740495_JaffaCakes118
Size
41KB
MD5
df3ba6bad6fea88a1fbd9752f3740495
SHA1
90e46aca18f5c0d873572f51060319acf27c2262
SHA256
57b7afc5b408323757df73e0f50944405d951582d5cf63b419151742cf495cd4
SHA512
0058783dd58d16d1c8e5aaf18df4e231d78508d3adc5ce7c2a6b8b409760b7edf6b4ddc0d87a4971e5aef51d180f82b3d65df49d5d426d32aa1de719dd6d6370
SSDEEP
768:FRtI+vuGnY6AlX/99zAayjoQH+JWlcmAfQ0OieD1OwgDia:PjGGnLAlP7AP0qiCjAtOie8VDia
Checks for missing Authenticode signature.
resource |
---|
df3ba6bad6fea88a1fbd9752f3740495_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
RegCloseKey
IsWindow
listen
GetModuleFileNameExA
waveInStop
BitBlt
CreateStreamOnHGlobal
ImmGetContext
capCreateCaptureWindowA
free
ShellExecuteA
StrChrA
Qy001DoMainWSSK
222222222222
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE