Fury
Probka
Static task
static1
Behavioral task
behavioral1
Sample
b49a216e03a62392dc1243d0f093c7ff_JaffaCakes118.exe
Resource
win7-20240221-en
Target
b49a216e03a62392dc1243d0f093c7ff_JaffaCakes118
Size
396KB
MD5
b49a216e03a62392dc1243d0f093c7ff
SHA1
f42c94b9fba18c0cb9184c86584dc2745cd6ad02
SHA256
5aae3d166c68743d2868bcd732fa61c2491ddcbe64e6a05f078b48f920cc2be5
SHA512
d203184efa3cf1af1ae24ec78ba6ab3c8e1e101184be9dd9414b3fa2b0c9d3a91b26bf86450d48b4b694dfe99229afbf9d6ee9175d6030c0f2f11ae6fb606d72
SSDEEP
6144:Et7yGXk+IlGThqs2YmTXTIbAsBJBM+CQjbTpalJj5gXep0nhCsZ:E0mk+1Q4ATIZBJCsMjNpT+
Checks for missing Authenticode signature.
Processes:
resource |
---|
b49a216e03a62392dc1243d0f093c7ff_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteConsoleOutputCharacterW
FindResourceExW
FindResourceW
LoadResource
InterlockedIncrement
SetConsoleTextAttribute
GetCurrentProcess
GetModuleHandleExW
SetConsoleScreenBufferSize
CancelWaitableTimer
GetModuleHandleW
SetFileTime
TzSpecificLocalTimeToSystemTime
GlobalAlloc
GlobalFindAtomA
GetLocaleInfoW
SetSystemTimeAdjustment
GetFileAttributesA
GetConsoleAliasW
TerminateProcess
FileTimeToSystemTime
GetCompressedFileSizeA
GetTimeZoneInformation
GlobalUnlock
DisconnectNamedPipe
GetConsoleOutputCP
GetLastError
GetProcAddress
SetFileAttributesA
OpenWaitableTimerA
GetAtomNameA
AddVectoredExceptionHandler
GetTapeParameters
GlobalUnWire
lstrcatW
VirtualProtect
FindAtomW
LocalFree
lstrcpyW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
IsDebuggerPresent
Sleep
ExitProcess
SetConsoleCtrlHandler
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
HeapSize
GetLocaleInfoA
GetModuleHandleA
SetStdHandle
WriteConsoleA
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
Fury
Probka
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ