@fjfkyu@0
@sdiufvsi@0
Static task
static1
Behavioral task
behavioral1
Sample
82055391ce934d24fad1829cfd823488_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
82055391ce934d24fad1829cfd823488_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
82055391ce934d24fad1829cfd823488_JaffaCakes118
Size
263KB
MD5
82055391ce934d24fad1829cfd823488
SHA1
3cf08dfa89871822ae05c9eb4d0965330c3d5a25
SHA256
67e1f8bc21e8eecb70370d4ca6fa3bf29006c9830f28ce979226391fd80e1f4e
SHA512
2c1a580028101e7cb0cd0fc774eacf18cc62869ac61f3376b5f57ba3452221431e2f1ce7df96019f590886a9551703392bc7e11e330809ff668e571228d32c7c
SSDEEP
3072:VQVAM4owAXYNgfqiC5CVlKHik4BN7Z65nLfZ+BBwHQmTVQ5pBqhgi8POqp00cBjG:Vi1cNtKVkibLoLf87cQmTVh98WA00WG
Checks for missing Authenticode signature.
resource |
---|
82055391ce934d24fad1829cfd823488_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapSize
GetVolumeNameForVolumeMountPointA
SetCommBreak
SetCommConfig
HeapFree
SetConsoleCtrlHandler
ConnectNamedPipe
IsBadStringPtrA
GetProcessIoCounters
SetVolumeLabelA
GetPrivateProfileStringA
GetOverlappedResult
MultiByteToWideChar
GetCommTimeouts
EnumSystemCodePagesA
SetFileApisToANSI
GetEnvironmentVariableA
GetModuleFileNameW
VirtualProtect
GetFullPathNameW
ScrollConsoleScreenBufferW
GetProcAddress
LoadLibraryA
IsWow64Process
ReadConsoleA
GetConsoleCP
lstrcpyA
SetThreadExecutionState
GetThreadSelectorEntry
GetDefaultCommConfigW
GetSystemTimeAdjustment
lstrlenA
lstrlenW
BindIoCompletionCallback
GetMailslotInfo
GetPriorityClass
FindNextVolumeW
GetThreadPriority
CreateFileA
GetNumaNodeProcessorMask
MapViewOfFile
_hread
GetConsoleAliasW
Sleep
ResetWriteWatch
CompareStringW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetCommandLineA
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
ReadFile
GetCaretPos
AdjustTokenPrivileges
DeregisterEventSource
EnumServicesStatusW
RegDeleteValueA
RegisterEventSourceW
AreAllAccessesGranted
@fjfkyu@0
@sdiufvsi@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ