CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
Static task
static1
Behavioral task
behavioral1
Sample
a31339df125f7b5b735e7a4a77172558_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a31339df125f7b5b735e7a4a77172558_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
a31339df125f7b5b735e7a4a77172558_JaffaCakes118
Size
3.4MB
MD5
a31339df125f7b5b735e7a4a77172558
SHA1
bb82d446e3f0a77f4b64cab275df73351e45f223
SHA256
4b53e251b69373bb0eec41605284ec378e1ffc1b8eb7700b283ef4cb5d300761
SHA512
99ea1f737135ce57145ffad26d73edd29ac2a38c9b12a9f68e7caaabd3829de87ecd5045673bac8d9ef7f164f678be7b16ed1962a26eae9a3abc14148bf61640
SSDEEP
98304:7KcXPnOredBQB4NkXuleUw+Np4c91OYrpD4KOsZ:JfOreQ6eQeUbNp4Mf4
Checks for missing Authenticode signature.
resource |
---|
a31339df125f7b5b735e7a4a77172558_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE