_Eg8B1Sej0
_fw5QCFh4m@16
upo16OcDMt@16
Static task
static1
Behavioral task
behavioral1
Sample
e75a73ccd1c8c8d3457040b7e01af3f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e75a73ccd1c8c8d3457040b7e01af3f3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
e75a73ccd1c8c8d3457040b7e01af3f3_JaffaCakes118
Size
159KB
MD5
e75a73ccd1c8c8d3457040b7e01af3f3
SHA1
b41f34c79db28c573e82c04a042c9b0c14fa790e
SHA256
debdd3f09cb2c2e37fa9d19ed82ffc4ad72c09a289cdbdce47eca8d436029494
SHA512
f53b317ec918df203349d2bd0cc7c7f3e42b1e4366ff5bc466c24045eb49e617d45f8ca1c42dc64a2c2f367fb86b258f939ddc364a0d830879d233c4d8df8687
SSDEEP
3072:pXpOvqrROgpNcQJFi2Hnu0UOMOLX7DO+UZ4TlNSCSr0hGDIch/C26k:loE1pqcO3OMOD+tCN1SpU2
Checks for missing Authenticode signature.
resource |
---|
e75a73ccd1c8c8d3457040b7e01af3f3_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SHGetFolderPathA
DragQueryFileA
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHGetSpecialFolderLocation
LoadLibraryA
InitializeCriticalSection
ExitProcess
HeapFree
VirtualAlloc
GetProcessHeap
LoadResource
GetForegroundWindow
GetCursor
GetWindowTextLengthA
GetKeyNameTextA
GetFocus
EnableWindow
GetIconInfo
GetMenu
mbstowcs
srand
memcpy
clock
memmove
exit
wcscspn
calloc
tolower
_Eg8B1Sej0
_fw5QCFh4m@16
upo16OcDMt@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ