@dfkvodv@0
@mctraxer@0
Static task
static1
Behavioral task
behavioral1
Sample
28a9d71c36fab3f5e4585da447bf67a7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
28a9d71c36fab3f5e4585da447bf67a7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
28a9d71c36fab3f5e4585da447bf67a7_JaffaCakes118
Size
226KB
MD5
28a9d71c36fab3f5e4585da447bf67a7
SHA1
f60f19c4649cfc798a020e2e180912f1b549f449
SHA256
191d63a9bd5d4d0efc69ff5c6b64c5ad7ca687fbb407e2f737794276a10e4287
SHA512
bee3c8a12f160403220d4d1f562cb9d804d4afdf9a9c0e9cd514c3d46fde9ad7614480479a347daf8bf0eb291d84816c13099abc1c69e7e53138f7bb7b3b117d
SSDEEP
6144:elS0zkBLoMTJNDUc+PQplvZSUZ4zQ5eL:chkBsMTJNDwQnvZS2r5
Checks for missing Authenticode signature.
resource |
---|
28a9d71c36fab3f5e4585da447bf67a7_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
SetConsoleTextAttribute
ConnectNamedPipe
GetPrivateProfileStringA
GetQueuedCompletionStatus
SetCommBreak
EnumDateFormatsExA
GetSystemWindowsDirectoryA
GetCurrentProcess
GlobalAlloc
GetFullPathNameW
GetWriteWatch
GetProcAddress
LoadLibraryA
HeapReAlloc
lstrcpyA
SetThreadExecutionState
GetDefaultCommConfigW
GetEnvironmentVariableW
BuildCommDCBAndTimeoutsW
GetAtomNameW
GetLastError
FindNextVolumeW
GetMailslotInfo
GetTickCount
lstrlenA
lstrlenW
ClearCommError
LoadResource
ReadConsoleA
CompareStringA
CreateFileA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetStartupInfoW
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleA
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
ReadFile
IsValidSid
RegisterEventSourceW
RegQueryMultipleValuesA
AlphaBlend
@dfkvodv@0
@mctraxer@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ