@dfkvodv@0
@mctraxer@0
Static task
static1
Behavioral task
behavioral1
Sample
0b6e972e6d5d8bd62cbef9d2b5bfe4ea_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0b6e972e6d5d8bd62cbef9d2b5bfe4ea_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
0b6e972e6d5d8bd62cbef9d2b5bfe4ea_JaffaCakes118
Size
116KB
MD5
0b6e972e6d5d8bd62cbef9d2b5bfe4ea
SHA1
895f675fa4dc040777ebe042210ba5920dbd2cc8
SHA256
cb6156630fbb292a348014fb63af9f9be12d97b4c6b3c027a7d3801d47c6dbfb
SHA512
eb736289c1ccb2054400c13c341ba7087c0588f2d1e79f9ebbff54d01ec3d42116dcb91084cd5480f222294afaff67afaf60fbd4653e203e72a400ac1e11c9ce
SSDEEP
1536:LBNNJ5kdqULXP6f4ccRiFHLxnPZyzP4Gt5BQItBWEYfvPyX96ifyMzlRsLN0s:r75qLZidazP4Gt5aItBpCv6oVMx9
Checks for missing Authenticode signature.
resource |
---|
0b6e972e6d5d8bd62cbef9d2b5bfe4ea_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetupComm
HeapAlloc
SetConsoleTextAttribute
DisconnectNamedPipe
IsBadStringPtrA
SetProcessWorkingSetSize
SetVolumeLabelA
GetPrivateProfileStringW
MultiByteToWideChar
PurgeComm
VirtualProtect
EnumDateFormatsExA
GetSystemWindowsDirectoryA
GetCurrentProcess
GlobalAlloc
GetFullPathNameA
LoadLibraryA
SizeofResource
ReadConsoleW
lstrcpyW
GetThreadSelectorEntry
SetThreadExecutionState
GetDefaultCommConfigW
GetAtomNameA
GetEnvironmentVariableA
BuildCommDCBAndTimeoutsW
SetMailslotInfo
GetLastError
GetTickCount
GetPriorityClass
FindNextVolumeW
ProcessIdToSessionId
WTSGetActiveConsoleSessionId
lstrlenA
lstrlenW
IsWow64Process
CompareStringA
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetStdHandle
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
HeapSize
CloseHandle
CreateFileA
RegQueryMultipleValuesA
WinHttpCloseHandle
@dfkvodv@0
@mctraxer@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ