AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
2941e46b43dce725ae83430f93574224_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2941e46b43dce725ae83430f93574224_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
2941e46b43dce725ae83430f93574224_JaffaCakes118
Size
586KB
MD5
2941e46b43dce725ae83430f93574224
SHA1
027ef3dacc5c1cbfbdd9ccdded8dd2b56853bed5
SHA256
737e616174fefbe4312fe4d8fae18c495475762357d7500d68c8aaf26881e88e
SHA512
48c5a68d4a21697af38d5699211460f8ab9061099e1979cb7e588deb7651d6c2c7c1b6b89cd5f904f7d836ea879b2efb6fe3b1e40336069b3a26dbdbbadba1f8
SSDEEP
6144:DT48ZAiL+IJ7wn1P8pAfU4hKky/cfUx4X:DTzcIUUKfU4hKky/2Uxs
Checks for missing Authenticode signature.
resource |
---|
2941e46b43dce725ae83430f93574224_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
UnityMain
SystemFunction036
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE