DllInstall
ServiceMain
ldap_open
Static task
static1
Behavioral task
behavioral1
Sample
040e8ef73876a9570f8680bcf1667888_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
040e8ef73876a9570f8680bcf1667888_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
040e8ef73876a9570f8680bcf1667888_JaffaCakes118
Size
44KB
MD5
040e8ef73876a9570f8680bcf1667888
SHA1
e8b7dd95e205cddb25df8666b1edeb1c41178f66
SHA256
e47996f39da839ab837dd2c7c49d6896cb5d1f1f030e8db68664a00567e56cef
SHA512
9ce59189a649667f58c95da7beae9c206114bff687ca38f81fcdad23e6e8d423608893e59dae5f9b321b472a6ca914ab42902be4cb1893622d9d4fb4ba1364c7
SSDEEP
768:ndFELv4I8kHVSrVFNd90lnUB7ExMX/A7uriuJIVHXtEVzcCCWVO:dFmv4I51+BQno4xMX/A7uxy1XtEVzLCj
Checks for missing Authenticode signature.
resource |
---|
040e8ef73876a9570f8680bcf1667888_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
capCreateCaptureWindowA
StrCmpW
GetModuleFileNameExA
ExitWindowsEx
waveInUnprepareHeader
malloc
DeleteObject
ImmReleaseContext
RegCloseKey
listen
CreateStreamOnHGlobal
ShellExecuteA
DllInstall
ServiceMain
ldap_open
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE