AervicbMaio
ServiceMain
servicemain
Static task
static1
Behavioral task
behavioral1
Sample
36f0482d98b2efaddea102ba1789702c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36f0482d98b2efaddea102ba1789702c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
36f0482d98b2efaddea102ba1789702c_JaffaCakes118
Size
112KB
MD5
36f0482d98b2efaddea102ba1789702c
SHA1
f02ee35cd4ccc2d0ce2ff4c25266805cd1631131
SHA256
ddae63653d17401282f3901138af974411b1b2a4c4a3782e54985f97199e88f2
SHA512
18d39087092fdc1c4d47c39c415bf906e81996b9fba2077e5c42dc949d71ac3a80e1f8ec6a2107e260c5d9fb25806f77d79ff4f1d472ee76438eed1eb7f2611f
SSDEEP
1536:dpEi8VwQdLg74xBiFSVtlGrDe8NrcdW1fVmMjUatjoDYsVYTelfU:dpl8zg7MBQlNr6WtVmMjntjoDZYTaM
Checks for missing Authenticode signature.
resource |
---|
36f0482d98b2efaddea102ba1789702c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
TerminateThread
SetEvent
GetProcAddress
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
VirtualFree
CreateProcessA
GetDiskFreeSpaceExA
GetLogicalDriveStringsA
SetLastError
CreateRemoteThread
OpenProcess
lstrcmpiA
MapViewOfFile
CreateFileMappingA
CreatePipe
GetTickCount
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
FreeLibrary
malloc
free
strrchr
_CxxThrowException
strncat
realloc
atoi
strlen
_beginthreadex
calloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
strcmp
strchr
strcpy
memcmp
strstr
wcstombs
_ftol
memmove
__CxxFrameHandler
_strnicmp
_itoa
memcpy
??3@YAXPAX@Z
_except_handler3
??2@YAPAXI@Z
memset
ceil
_strcmpi
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
capGetDriverDescriptionA
capCreateCaptureWindowA
ICSeqCompressFrame
ICSeqCompressFrameStart
ICSendMessage
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
AervicbMaio
ServiceMain
servicemain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ