?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
Static task
static1
Behavioral task
behavioral1
Sample
fab0950a09f34bc2d2f5046e912357aa_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fab0950a09f34bc2d2f5046e912357aa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
fab0950a09f34bc2d2f5046e912357aa_JaffaCakes118
Size
186KB
MD5
fab0950a09f34bc2d2f5046e912357aa
SHA1
4db48b8afc365e97351cc8f14baff75722332026
SHA256
4e3ba0c8f869cac4c29a4ddecc98da3e058840236b47fd30ea5d0d4576964b5c
SHA512
20a3e9d5f2a4c3cc9af8526f2384a102d2536ee8a3700d1a0a114789395adf086b6919d3d2f2fd52d74ad2656ec7c91f84057370cc5cfc10f14fbcbaa9f0eda4
SSDEEP
3072:C4SEMAmZZ7NqUQRBE+PUswbIs46mc6VuEn813Rw5LlOEnzn6YBPpS8IkRcb:qjNVMUUK+8swb0c6VudQky6KPNYb
Checks for missing Authenticode signature.
resource |
---|
fab0950a09f34bc2d2f5046e912357aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrToIntA
PathStripPathW
LoadLibraryExA
GetModuleHandleA
lstrcmpA
?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ