??0ConvertRemote@@QAE@XZ
??1ConvertRemote@@QAE@XZ
??4ConvertRemote@@QAEAAV0@ABV0@@Z
?RpcCallFailed@ConvertRemote@@QAEHXZ
Static task
static1
Behavioral task
behavioral1
Sample
0ea4f489de980d0f53d975c75e8c1ff2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ea4f489de980d0f53d975c75e8c1ff2_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
0ea4f489de980d0f53d975c75e8c1ff2_JaffaCakes118
Size
225KB
MD5
0ea4f489de980d0f53d975c75e8c1ff2
SHA1
bad78a777969f47a52a02cc906682aa7c93ad5d7
SHA256
aeb32bce6d61a28c165c2ef9417833cf4c560c86f48b6c4275df8766b263dbdb
SHA512
1e76637001b1f2364786afca558ab45853cf3e4c646fa325d4bd9fad173ed5df4897a2b2b92112070cf062d3fd97b0349a1ce890a4483c23107b5461fea038a2
SSDEEP
6144:NJ3F8fAACgch9KqQQvuH7LUmptHsmPdvw:j9QQviLjXdI
Checks for missing Authenticode signature.
resource |
---|
0ea4f489de980d0f53d975c75e8c1ff2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
??0ConvertRemote@@QAE@XZ
??1ConvertRemote@@QAE@XZ
??4ConvertRemote@@QAEAAV0@ABV0@@Z
?RpcCallFailed@ConvertRemote@@QAEHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE