_geek@8
_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
181d1c0f87b5054ec4b76881abd8bee6_JaffaCakes118.exe
Resource
win7-20240221-en
Target
181d1c0f87b5054ec4b76881abd8bee6_JaffaCakes118
Size
196KB
MD5
181d1c0f87b5054ec4b76881abd8bee6
SHA1
fee7563206b1649ee97e97b2be5151eeed3e5b1d
SHA256
95243c2b1612cc480064343f0f6445da2ec3d118f00e2115b7fd1ea68e867bec
SHA512
6058e85b369cc3a3669e0c96699fbb1f55b7bc4f274e3c564fbd38937d1d3b206d8771f9bd813131aaa883371d03b437566c4d7a8688dc39649859c82088837b
SSDEEP
3072:AXZxpP/LI6iwRtjG4DrcGqGI9fP7AhdLEsUXbPwUO784beW3VzrAHHZD5YgwJpeL:AXNqH4DmX9fP7AHEBb+bvxrOHqgL
Checks for missing Authenticode signature.
Processes:
resource |
---|
181d1c0f87b5054ec4b76881abd8bee6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalUnlock
FileTimeToDosDateTime
lstrlenA
FindResourceExW
CallNamedPipeA
LoadLibraryExW
ReadConsoleA
InterlockedDecrement
ScrollConsoleScreenBufferW
GetUserDefaultLCID
InterlockedCompareExchange
FreeEnvironmentStringsA
_lclose
SetTapeParameters
GetSystemTimeAsFileTime
WriteFile
TlsSetValue
LoadLibraryW
Sleep
GetVersionExW
DeleteVolumeMountPointW
LeaveCriticalSection
WritePrivateProfileStructW
SetConsoleMode
WriteConsoleW
lstrcatA
DisconnectNamedPipe
ReleaseActCtx
SetCurrentDirectoryA
GetLastError
IsDBCSLeadByteEx
GetProcAddress
BeginUpdateResourceW
CreateNamedPipeA
SetVolumeLabelW
WriteProfileSectionA
IsValidCodePage
GetLocalTime
LoadLibraryA
LocalAlloc
IsSystemResumeAutomatic
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetOEMCP
GetThreadPriority
WaitCommEvent
GetCommTimeouts
EnumDateFormatsW
OpenSemaphoreW
AreFileApisANSI
lstrcpyA
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
HeapSize
RtlUnwind
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
RaiseException
_geek@8
_gekelberifin@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ