asw_process_storage_allocate_connector
asw_process_storage_deallocate_connector
on_avast_dll_unload
onexit_register_connector_avast_2
Static task
static1
Behavioral task
behavioral1
Sample
421818608615e379693b73d6664e6057_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
421818608615e379693b73d6664e6057_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
421818608615e379693b73d6664e6057_JaffaCakes118
Size
253KB
MD5
421818608615e379693b73d6664e6057
SHA1
925c500435abfaa695eecb884144b2fe6c223cc8
SHA256
6c5ae3644a6a78769c2a5d550277d202b0354a15133284189a4b5e5cabfb0a6a
SHA512
0b8bf6645f6305322e69c27a317e2f38839cbb8c91aee3c71aaab33a4ed7ac1b52068088a4ba974d1a2011b2a69d1ad24cb968a7b2d232e5e052a8706fef9cba
SSDEEP
6144:+NIKjrFzuemHiCeCWlbSDvstmMfzKhyAmeD:OIK3FTwUlbwvst5f2kAmeD
Checks for missing Authenticode signature.
resource |
---|
421818608615e379693b73d6664e6057_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
VerQueryValueW
inet_ntoa
RtlUnwind
FreeSid
CoTaskMemFree
SysStringLen
FtpOpenFileW
WinHttpOpen
UuidIsNil
ord20
DnsFree
CreateEnvironmentBlock
WTSFreeMemory
asw_process_storage_allocate_connector
asw_process_storage_deallocate_connector
on_avast_dll_unload
onexit_register_connector_avast_2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE