_geek@8
_gekkko@8
Static task
static1
Behavioral task
behavioral1
Sample
e28ad650ea4f13b9f561647fb4279691_JaffaCakes118.exe
Resource
win7-20240215-en
Target
e28ad650ea4f13b9f561647fb4279691_JaffaCakes118
Size
3.8MB
MD5
e28ad650ea4f13b9f561647fb4279691
SHA1
cbb33be5517c273782edcb793b838081e2a7a6d3
SHA256
65cb3d18671644e8099ec1a908dae7957cc4931989e2825fc874f370a6aaffb7
SHA512
96e81bdab1cbc38da583d715f26f44f1b91a236d310498e25bdaf11bf6d46b2a2e9fd9b9125128ec5ea3ccdedf473572c6deecd80cafad81123b6e411ec099ef
SSDEEP
49152:ErRzBKh90C4g1dl0+lG87ybiTbLddalrRQvz2Dolm5m8rqtNrhLgjJoU3qEOlDfK:eRzidbs87GizddCr+Su2tqt9amU3gy/
Checks for missing Authenticode signature.
resource |
---|
e28ad650ea4f13b9f561647fb4279691_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetVolumeLabelA
SetDefaultCommConfigA
CreateMutexW
lstrlenA
WritePrivateProfileStructA
CopyFileExW
TlsGetValue
MoveFileExA
_llseek
GetNumberOfConsoleInputEvents
FindResourceExW
CallNamedPipeA
DeleteVolumeMountPointA
WriteTapemark
InterlockedIncrement
ReadConsoleA
CompareFileTime
WaitForSingleObject
InterlockedCompareExchange
_lclose
SetTapeParameters
GetModuleHandleW
VirtualFree
WriteFile
GlobalAlloc
Sleep
LeaveCriticalSection
GetFileAttributesW
WriteConsoleW
GetOverlappedResult
GetACP
DeactivateActCtx
GetPrivateProfileSectionNamesW
IsDBCSLeadByteEx
GetProcAddress
GetTapeStatus
BeginUpdateResourceW
CreateNamedPipeA
LocalLock
IsValidCodePage
SearchPathA
SetFileApisToOEM
GetLocalTime
LoadLibraryA
SetCalendarInfoW
IsSystemResumeAutomatic
GetProfileStringA
WriteProfileSectionW
SetNamedPipeHandleState
EnumDateFormatsA
GetThreadPriority
WaitCommEvent
LoadLibraryExA
ContinueDebugEvent
VirtualProtect
PurgeComm
ScrollConsoleScreenBufferA
OpenSemaphoreW
GetVersionExA
DeleteFileW
DebugBreak
FindActCtxSectionStringW
GetSystemTime
lstrcpyW
GetLastError
GetSystemDefaultLangID
WideCharToMultiByte
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapAlloc
HeapCreate
VirtualAlloc
HeapReAlloc
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
GetModuleHandleA
GetBoundsRect
_geek@8
_gekkko@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ