CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
Static task
static1
Behavioral task
behavioral1
Sample
99734bf20a30cd6c6bbe0e9167e5ceb8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
99734bf20a30cd6c6bbe0e9167e5ceb8_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
99734bf20a30cd6c6bbe0e9167e5ceb8_JaffaCakes118
Size
4.5MB
MD5
99734bf20a30cd6c6bbe0e9167e5ceb8
SHA1
2c0bc87ebafb8e42fc53de5ed842c39a7d7490ea
SHA256
20b804802477ec279eb1f5ae59d17814cc46fdf46b5d5cfd40187513e674d003
SHA512
36f8b58533538f37e629e922a9b7ad3fad3fbb1cbb2678afc4e6da2027bb57a9f4de6c4fb5e6582ac0131a3151325dfc66b9717b1e69e99ce0cf8df82d27b1ff
SSDEEP
98304:PBRN9IVnte3pd3Wotx66TBh0vbuEtxxG8wyJyw:PBH9IMdpxxwfGry
Checks for missing Authenticode signature.
resource |
---|
99734bf20a30cd6c6bbe0e9167e5ceb8_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE