AmdPowerXpressRequestHighPerformance
Brainstorm
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
7f7b819896ebfd1144dec59d39db1d0c_JaffaCakes118.exe
Resource
win7-20240221-en
Target
7f7b819896ebfd1144dec59d39db1d0c_JaffaCakes118
Size
1.7MB
MD5
7f7b819896ebfd1144dec59d39db1d0c
SHA1
e7330667651ace79597409eafee69070dccb9c76
SHA256
5a3fe9fdaaf9507073e7c6c4f0072f80a9583ba6d5e85a57aad58d1f87f5a0b7
SHA512
0cf29b6582822236e804debbb5dcbc7b375172946f6bd171f04e2d16d055a9c86146d1979275d15eddee44d7d3fe7128ddd301b09daaa7e07a58261da8c0012d
SSDEEP
49152:q++X7Hkgo2RzZ/iWPrc+PDs6BGAJHnnou:qp7Hkgo27iIQ+7hXn
Checks for missing Authenticode signature.
resource |
---|
7f7b819896ebfd1144dec59d39db1d0c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AmdPowerXpressRequestHighPerformance
Brainstorm
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ