getBuss
getCuss
getMuss
Static task
static1
Behavioral task
behavioral1
Sample
fa6c8a6409f99df0a79bbe491f32b8d1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa6c8a6409f99df0a79bbe491f32b8d1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
fa6c8a6409f99df0a79bbe491f32b8d1_JaffaCakes118
Size
115KB
MD5
fa6c8a6409f99df0a79bbe491f32b8d1
SHA1
b9454a430d1910a26bda663692602179a10a8cda
SHA256
e59275bc7c7d0762c20b293a9117b70ed775139ec0cd4f8d42c3f94e072ee501
SHA512
f21ca8a569fcf493e416c9b0ac08566b06aca97d255e931d500f4ee357d8eeedd1600366615c379636deaf6b2a7b1800c2373592cfa1ebb93e09ecbe4147e142
SSDEEP
3072:3JSyY9speOtZh5y8uXvg4L3ciaxZuchKzIONOozv4iYdPH2P:3kyY9geOThM8gz7ciaxBK0OnzvRYpWP
Checks for missing Authenticode signature.
resource |
---|
fa6c8a6409f99df0a79bbe491f32b8d1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleW
VirtualAlloc
GetProcAddress
EnumProcesses
getBuss
getCuss
getMuss
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE