AhnHSMakeResponse
TerminateHackShield
Static task
static1
Behavioral task
behavioral1
Sample
073e55e0d65d4ce38fc4660b81f76f20_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
073e55e0d65d4ce38fc4660b81f76f20_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
073e55e0d65d4ce38fc4660b81f76f20_JaffaCakes118
Size
760KB
MD5
073e55e0d65d4ce38fc4660b81f76f20
SHA1
a28d7809a88f474bca31baf15c49bf1dda4effc6
SHA256
411b5223cae8de73f9585a4ad1c718e285b43fdd119e08565c83e5353f1ab030
SHA512
5204335fc84f8ca3f8064792559a258407194c347f54a31ca5f2dc958356ea4495efffedc535ef6ae7abb8ff99a8ad910b470c7e9338f2801bb5633378611670
SSDEEP
12288:R8DtU7LYHQxquQSBGOYnI/fFPQM2tLJz8ChrrgaqOeWAnTdlu5PuDbADNwiGGUl:CDtU7Lew5xOMAJNrgaqO3sTdM5PCbATM
Checks for missing Authenticode signature.
resource |
---|
073e55e0d65d4ce38fc4660b81f76f20_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcpy
DeleteCriticalSection
TlsSetValue
lstrlenW
Sleep
GetKeyboardType
WindowFromPoint
RegQueryValueExA
RegSetValueExA
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
VerQueryValueA
UnrealizeObject
CreateStreamOnHGlobal
ImageList_SetIconSize
ImmSetCompositionWindow
AhnHSMakeResponse
TerminateHackShield
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE