Nprdtgfjqir
BeginVurrruqd
Static task
static1
Behavioral task
behavioral1
Sample
0c679d55dc64107e0293a4c892f32664_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0c679d55dc64107e0293a4c892f32664_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0c679d55dc64107e0293a4c892f32664_JaffaCakes118
Size
212KB
MD5
0c679d55dc64107e0293a4c892f32664
SHA1
c14fdb852402a2b8dcf03c8d8e7f7746b3cdb9c5
SHA256
d1e206ac3d03f94dcc472ea66ee131e897e7cf9d4782afdd3054812f529cb8cd
SHA512
1b935f59b2f2e0893d3fccc05db7315237bd7791592bf09027a9f9bf48ef968357b65071dc4c3c6156c5606ff5a75789201669f597e327c67980b3733300b29f
SSDEEP
3072:wPFnqJsR2WkCkwyLCE/Qm+VcOOSYbG+YInssqj:wt9H7kvmGQmiwtHU
Checks for missing Authenticode signature.
resource |
---|
0c679d55dc64107e0293a4c892f32664_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapFree
DefineDosDeviceA
SetFilePointer
Thread32Next
SetProcessWorkingSetSize
GetProcAddress
RegisterWaitForSingleObject
OutputDebugStringA
SetSystemTime
EnumResourceTypesA
GetSystemWindowsDirectoryA
CommConfigDialogA
VirtualAlloc
GetNumberFormatA
GetConsoleCommandHistoryLengthW
GetCurrentProcess
GetCurrencyFormatA
EnumSystemLanguageGroupsA
GetTickCount
HeapWalk
GetCommProperties
IsBadHugeReadPtr
GetBinaryTypeA
ResetEvent
MoveFileA
SetFileAttributesA
EnumResourceNamesA
GetCurrentProcess
GetComputerNameA
WriteFile
GetLocaleInfoA
WriteConsoleInputA
InternetOpenA
FindNextUrlCacheEntryW
HttpQueryInfoA
InternetConnectA
InternetOpenUrlA
HttpOpenRequestA
HttpSendRequestA
Nprdtgfjqir
BeginVurrruqd
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ