AcroRd32IsBrokerProcess
GetWinstaDesktopInfoForRdrCEF
Static task
static1
Behavioral task
behavioral1
Sample
348a5fc6fd2827f81c2cc75c84b5dac2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
348a5fc6fd2827f81c2cc75c84b5dac2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
348a5fc6fd2827f81c2cc75c84b5dac2_JaffaCakes118
Size
590KB
MD5
348a5fc6fd2827f81c2cc75c84b5dac2
SHA1
ce18d7223de4552172a6251aacc8a4c1ec3608e8
SHA256
1b67e8bbcac7993421d9ea0f7e9f14d3b73669171d3573f3ed5aa94c3b65dec0
SHA512
54c791ac6601431d6e91fa8e56295958836755c8a910d52fdbca3d2150bff0763a1b523c676c3d9a05a3722a2c2e344456eed5c829442ad5510b85c21608a0cc
SSDEEP
3072:mjGJblxgMXaETK0/SryFoWiYc+/vcbef50JUaRKV/1aDVnILrzZ2Cwifp+CIRMNK:mjmDgs+bF
Checks for missing Authenticode signature.
resource |
---|
348a5fc6fd2827f81c2cc75c84b5dac2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
FindWindowW
FreeSid
SHGetKnownFolderPath
CoTaskMemFree
free
?_Xbad_alloc@std@@YAXXZ
AcroRd32IsBrokerProcess
GetWinstaDesktopInfoForRdrCEF
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE