AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
Static task
static1
Behavioral task
behavioral1
Sample
458af0901826423076c359405718061e_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
458af0901826423076c359405718061e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
458af0901826423076c359405718061e_JaffaCakes118
Size
39KB
MD5
458af0901826423076c359405718061e
SHA1
7f08023a094d144ed4efc28f4c996c46fef7c0bf
SHA256
ccb17b569b2a9af172c5290730980470191acf9dc142c1a5c4a79ae209df66f2
SHA512
352ad711a0c49551deeda30fdcba1540217c34ca7209bb10f6edfd02e0d2496fe543cc2bff9a9ea5ae1db1b315f27a78513ed575c37405a31671258dc744eb1a
SSDEEP
768:fSoymlQVgsshx/pg2y8JpUm9O28Llh9RD6GdhbRopXNj3XCwoPoOY7Dr:fSzmlQshx/5y8P9O2ElhjrdhbupNj3pF
Checks for missing Authenticode signature.
resource |
---|
458af0901826423076c359405718061e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
CommandLineToArgvW
ShowWindow
StrCmpW
ord90
AmdPowerXpressRequestBetterBatteryLife
NvOptimusDisablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE