_geek@8
_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
07b81037aad2a35adde70b82fed364e2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07b81037aad2a35adde70b82fed364e2_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
07b81037aad2a35adde70b82fed364e2_JaffaCakes118
Size
507KB
MD5
07b81037aad2a35adde70b82fed364e2
SHA1
7bfc2539a2a5747aa95de51be78875baa6a28716
SHA256
6b5fa6cdc36e6027f68469e98de10b95c5739da70e1e3073f50fbcc8cfb31ea9
SHA512
aff4fe8cba9add8afc265e25017d5b91ce122cabbd1193a7c1318891a53ff616d0bf5abd1ecbe67e6cead6491a0f19b801ac2b454e4d80af0a8b60b42f7271dc
SSDEEP
12288:iCir/SZC1LuC218RGxQ6aqz/gbZ/0z7B:9LC+1oG2kkZ07B
Checks for missing Authenticode signature.
resource |
---|
07b81037aad2a35adde70b82fed364e2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalUnlock
lstrlenA
WritePrivateProfileStructA
GetNumberOfConsoleInputEvents
FindResourceExW
CallNamedPipeA
LoadLibraryExW
ReadConsoleA
InterlockedDecrement
CompareFileTime
GetUserDefaultLCID
InterlockedCompareExchange
OpenSemaphoreA
FreeEnvironmentStringsA
_lclose
SetTapeParameters
CreateNamedPipeW
GetSystemTimeAsFileTime
WriteFile
TlsSetValue
GlobalAlloc
LoadLibraryW
Sleep
GetVersionExW
DeleteVolumeMountPointW
IsDBCSLeadByte
lstrcatA
SetThreadPriority
DisconnectNamedPipe
DeactivateActCtx
CreateJobObjectA
GetLastError
GetProcAddress
BeginUpdateResourceW
SetVolumeLabelW
WriteProfileSectionA
IsValidCodePage
EnterCriticalSection
_hwrite
GetLocalTime
LoadLibraryA
WriteConsoleA
LocalAlloc
SetCurrentDirectoryW
SetFileApisToANSI
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetOEMCP
EnumDateFormatsA
WaitCommEvent
GetCommTimeouts
RequestWakeupLatency
LocalSize
lstrcpyA
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
HeapSize
RtlUnwind
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
RaiseException
_geek@8
_gekelberifin@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ