@Bevuzi@8
@Dotogo@12
@Tedona@8
@Yucutu@4
@Zocobo@12
Static task
static1
Behavioral task
behavioral1
Sample
9599755fd02eca75ad8cc0033c9706f5_JaffaCakes118.exe
Resource
win7-20240221-en
Target
9599755fd02eca75ad8cc0033c9706f5_JaffaCakes118
Size
672KB
MD5
9599755fd02eca75ad8cc0033c9706f5
SHA1
15f43fd1056e0237c5a64ea2392cd8b89fb91aca
SHA256
4b14aa20e5f1cee63929d4db5b876e9f7d750fda70e0af68b9e249ef5dbb8f8a
SHA512
9a94e236711f6b48360f2e63f954c44e138517342eb9c4c409a9d388306f7b81916174fcabe75082668a0fd1d08e3145fc2f77ae3f529fbb6b2354e9a12de8a9
SSDEEP
12288:gRyB6xaf/lbMqRcMqDJ1yCP5bFeRJO2UHOcZcXZlz+7yCQAMMMMMMMb:gRy8afRcM2J1yq5bsKOcZUz+XMMMMMM4
Checks for missing Authenticode signature.
resource |
---|
9599755fd02eca75ad8cc0033c9706f5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetCalendarInfoW
BackupSeek
DnsHostnameToComputerNameW
GetProcAddress
LoadLibraryA
GetCommState
GetTempPathA
GetWindowsDirectoryA
InterlockedDecrement
VirtualProtect
LocalAlloc
EnumSystemCodePagesW
FindFirstFileExW
ReadConsoleW
GetSystemTimeAdjustment
SetThreadAffinityMask
GetCurrentThreadId
LocalFree
SetLocaleInfoA
WriteConsoleInputA
SetProcessShutdownParameters
EnumSystemLocalesW
GetLogicalDriveStringsW
lstrlenW
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
WideCharToMultiByte
GetCPInfo
GetVolumePathNamesForVolumeNameA
SetErrorMode
GetPrivateProfileSectionNamesW
GetSystemDefaultLCID
SetCommMask
GetProfileSectionW
HeapSize
GetVersionExA
EndUpdateResourceA
ResetEvent
GetCommandLineW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapFree
Sleep
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
GetStringTypeW
SendMessageTimeoutW
GetSystemMetrics
ChildWindowFromPointEx
GetCaretPos
GetWindowThreadProcessId
EnumServicesStatusA
AccessCheckByTypeResultListAndAuditAlarmW
ImpersonateLoggedOnUser
ReportEventA
RegEnumKeyExW
ReadEventLogW
GetSecurityDescriptorControl
RegOpenKeyW
AddAccessDeniedAce
QueryServiceLockStatusW
@Bevuzi@8
@Dotogo@12
@Tedona@8
@Yucutu@4
@Zocobo@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ