X6ffsv
Zw6vdd
Static task
static1
Behavioral task
behavioral1
Sample
06f5995615c19f1b84063868b7375a92_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06f5995615c19f1b84063868b7375a92_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
06f5995615c19f1b84063868b7375a92_JaffaCakes118
Size
79KB
MD5
06f5995615c19f1b84063868b7375a92
SHA1
e74ed54b26e92e792f363576f007030ec990edca
SHA256
06b4fdcde72db5d46c06f743fc983fc62f2da5272357fffe59ea76d00d914bd9
SHA512
c09cbadebc30c5a210354d5d5d4e6491965ccadac9488533c1aeeacaf4c2293a6410391df9a9d8a3f9a2965327a09fac2b9a19838b95db22f14a9e743ffe723b
SSDEEP
384:Ii3zpS49PYG21ldVQRtUDuzbDXLtzuK9WcUF2zgWr7BFrT5aykZYgN5bWBBdVQ5P:fnj2vs9d39WcUwZBFLabWBB5/
Checks for missing Authenticode signature.
resource |
---|
06f5995615c19f1b84063868b7375a92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ExitProcess
Sleep
LoadStringA
MessageBoxA
GetFileSecurityA
GetMultipleTrusteeA
GetServiceDisplayNameA
QueryServiceConfigA
X6ffsv
Zw6vdd
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE