AmdPowerXpressRequestHighPerformance
Brainstorm
NvOptimusEnablement
Static task
static1
Behavioral task
behavioral1
Sample
b386cb086e2e71b2c95d1d5e3fc9da84_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b386cb086e2e71b2c95d1d5e3fc9da84_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
b386cb086e2e71b2c95d1d5e3fc9da84_JaffaCakes118
Size
5.1MB
MD5
b386cb086e2e71b2c95d1d5e3fc9da84
SHA1
9e02a9808346fc664381ddce10b40b0dcb34efb3
SHA256
8e3216bae5ee1348a40631704e1580c46cc0e991db3dffb2933362477e39beef
SHA512
73de170ee2d03c1f9c07e9930c96e3a370549e8413d1205ec362db85c2b754ade9ec5f26309416fd159b7e2aa730e6770ee32e85bad0e87683fc7353bf80dfec
SSDEEP
98304:QrfgbqLMe+Oogqp5iRKQO9Fo04zCYzl/OYBSrt2NBmpaBiQcoKdNRBHkgb:4vsgUIREctp2ySrt2NspFoKjbkgb
Checks for missing Authenticode signature.
resource |
---|
b386cb086e2e71b2c95d1d5e3fc9da84_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NtFreeVirtualMemory
ReadFile
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetAsyncKeyState
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
QueryServiceStatus
WTSQuerySessionInformationW
WTSSendMessageW
AmdPowerXpressRequestHighPerformance
Brainstorm
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ