AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
Static task
static1
Behavioral task
behavioral1
Sample
3ad35e7dd2d8f0b6021a116075a51123_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3ad35e7dd2d8f0b6021a116075a51123_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
3ad35e7dd2d8f0b6021a116075a51123_JaffaCakes118
Size
111KB
MD5
3ad35e7dd2d8f0b6021a116075a51123
SHA1
6d408a354c78c51c611e9ea7e1875b5139580112
SHA256
888991fdb8659760b8745d3eb01d4222b74f3205a44b9304a64c1d699152d367
SHA512
10b9989803e24db659f5667993cbe7f89778f8549c11f5ea9958042d6de1fe1e4343d45a0bc8f8a38590f18d126c75b60977929af6e67d70b823dcf0ff940391
SSDEEP
1536:Vm6+eNbHRVfTOG1FOj6AyEg4l0mwOJFhom1dfQBA:Ve6xVfTyj0Eg4lLwOpomrsA
Checks for missing Authenticode signature.
resource |
---|
3ad35e7dd2d8f0b6021a116075a51123_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
CommandLineToArgvW
ShowWindow
StrCmpW
ord90
AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE