_geek@8
_gekelberifin@8
Static task
static1
Behavioral task
behavioral1
Sample
6aff96cef901aff32b0467145869627e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6aff96cef901aff32b0467145869627e_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
6aff96cef901aff32b0467145869627e_JaffaCakes118
Size
109KB
MD5
6aff96cef901aff32b0467145869627e
SHA1
04163649983c3626e84ac4d4b56f1cae740d5ad8
SHA256
3b3c84f6ba906770c3b5d55bd41f4bf98c7d0924b61d7d6dc2d1b4db6f4322d9
SHA512
abe77d4513d60643ff19b4291a10df10e4c73531ded9725581c460e0d329956545156face8a82bafdb9f002ddea3150e61ad441e7d5f955daee37390325567fd
SSDEEP
1536:zcXYDU/r6NR3ymx3QHE/DKV8b6kRd8ZPCsoXvBG6AXFUllbtWRU:gXYDU7mpT/OVsRdKP9ivBA0BWRU
Checks for missing Authenticode signature.
Processes:
resource |
---|
6aff96cef901aff32b0467145869627e_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalUnlock
lstrlenA
WritePrivateProfileStructA
GetNumberOfConsoleInputEvents
FindResourceExW
CallNamedPipeA
LoadLibraryExW
ReadConsoleA
InterlockedDecrement
CompareFileTime
GetUserDefaultLCID
InterlockedCompareExchange
OpenSemaphoreA
FreeEnvironmentStringsA
_lclose
SetTapeParameters
CreateNamedPipeW
GetSystemTimeAsFileTime
WriteFile
TlsSetValue
GlobalAlloc
LoadLibraryW
Sleep
GetVersionExW
DeleteVolumeMountPointW
IsDBCSLeadByte
lstrcatA
SetThreadPriority
DisconnectNamedPipe
DeactivateActCtx
CreateJobObjectA
GetLastError
GetProcAddress
BeginUpdateResourceW
SetVolumeLabelW
WriteProfileSectionA
IsValidCodePage
EnterCriticalSection
_hwrite
GetLocalTime
LoadLibraryA
WriteConsoleA
LocalAlloc
SetCurrentDirectoryW
SetFileApisToANSI
WaitForMultipleObjects
GetPrivateProfileSectionNamesA
GetOEMCP
EnumDateFormatsA
WaitCommEvent
GetCommTimeouts
RequestWakeupLatency
LocalSize
lstrcpyA
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
HeapSize
RtlUnwind
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
RaiseException
_geek@8
_gekelberifin@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ