_geek@8
_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
2d9c994755b04bb9499aa05fa87e3a2d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2d9c994755b04bb9499aa05fa87e3a2d_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
2d9c994755b04bb9499aa05fa87e3a2d_JaffaCakes118
Size
175KB
MD5
2d9c994755b04bb9499aa05fa87e3a2d
SHA1
7a7e66433bfbe7b50f937a3c4490900e67dd71e7
SHA256
7c078954989c1c7d5816edae5852ca1ba34747c9df002b835e3054f2f01c0d49
SHA512
d9b71a7692e961c2221b3d77708321259f0e3732af2195fdb7b628a39fcb7505761c1d958c219df7788810cce1f39a6dbf329b1af57818267d33de860329ff32
SSDEEP
3072:yXkWboE2irknxIbGY8mtHzsKeXUgONGaPUD4Jmw67Zg/R8Ym:yX5boEHknxPmpIKemNPUomrV2m
Checks for missing Authenticode signature.
resource |
---|
2d9c994755b04bb9499aa05fa87e3a2d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrlenA
WritePrivateProfileStructA
GetNumberOfConsoleInputEvents
FindResourceExW
LoadLibraryExW
ReadConsoleA
InterlockedDecrement
CompareFileTime
GetUserDefaultLCID
InterlockedCompareExchange
OpenSemaphoreA
CallNamedPipeW
FreeEnvironmentStringsA
_lclose
SetTapeParameters
CreateNamedPipeW
GetSystemTimeAsFileTime
WriteFile
TlsSetValue
GlobalAlloc
Sleep
GetVersionExW
DeleteVolumeMountPointW
IsDBCSLeadByte
lstrcatA
SetThreadPriority
GlobalUnlock
DisconnectNamedPipe
DeactivateActCtx
CreateJobObjectA
GetLastError
GetProcAddress
BeginUpdateResourceW
SetVolumeLabelW
WriteProfileSectionA
IsValidCodePage
EnterCriticalSection
_hwrite
GetLocalTime
LoadLibraryA
WriteConsoleA
LocalAlloc
SetCurrentDirectoryW
SetFileApisToANSI
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetOEMCP
EnumDateFormatsA
WaitCommEvent
GetModuleHandleA
GetCommTimeouts
RequestWakeupLatency
LocalSize
lstrcpyA
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
HeapSize
RtlUnwind
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
_geek@8
_gekelberifin@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ