guocyok888
DoService
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
0dec3ed43caa7520b425a33390b33d82_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dec3ed43caa7520b425a33390b33d82_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0dec3ed43caa7520b425a33390b33d82_JaffaCakes118
Size
44KB
MD5
0dec3ed43caa7520b425a33390b33d82
SHA1
008b94d6a8c6aad9a405bcb8156a93a7e4b713e7
SHA256
b936e8d96b1746459d2b6fcb5159d8980c10612b8d6779956831a75a9f8ee139
SHA512
b666bfda4d92908c8a20547e10f1a81b16752bd442e5bcc4246d8a2533a6d5764fac6b3b96bbd9a9d677fe312d6e7c2dda66fda5cf40a0b077c2255b8a580fbe
SSDEEP
768:ecMOUIHUKtTRulWDHcZ1Rj9KbpVSYWBBBRtfVBPX0+W4hf4eh1sf:e2jt4lWu1JobpVVWBB7tfr/Zf4+1sf
Checks for missing Authenticode signature.
resource |
---|
0dec3ed43caa7520b425a33390b33d82_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
StrCmpW
ImmGetContext
GetModuleFileNameExA
CreateStreamOnHGlobal
capCreateCaptureWindowA
waveInStop
ShellExecuteA
free
IsWindow
RegCloseKey
BitBlt
listen
guocyok888
DoService
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE