Memory
Roses
Sos
Surrender
Static task
static1
Behavioral task
behavioral1
Sample
0e7fad6fb0f0ab698aa5dd97671f5cda_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0e7fad6fb0f0ab698aa5dd97671f5cda_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0e7fad6fb0f0ab698aa5dd97671f5cda_JaffaCakes118
Size
3.7MB
MD5
0e7fad6fb0f0ab698aa5dd97671f5cda
SHA1
5487205b4c72bbf43bdd26acbc1ca2ec795a261d
SHA256
4f25ffe6ecd23059c997f153065857bdfe782850725d95dd4466dbf1a9d35750
SHA512
995c9cf7c596b625637afce9f72c39a861e5ba8473b79abddea9d5f65a084b07f4960c77a746bd0725408db11c538365b21988fe89456d4850fcc5e360f836d0
SSDEEP
98304:dpYOtoOq6ZcxePpvpXOAhzgntU6gpOVcsbkJqjiTs/:7DLXeePph5zgnLmbqGTs
Checks for missing Authenticode signature.
resource |
---|
0e7fad6fb0f0ab698aa5dd97671f5cda_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
FindResourceA
HeapAlloc
GetCurrentProcess
GetModuleHandleExW
GetTimeFormatA
GetTickCount
GetConsoleAliasesA
ActivateActCtx
GlobalAlloc
GetLocaleInfoW
SizeofResource
GetFileAttributesA
FindNextVolumeMountPointW
CreateJobObjectA
GetProcAddress
HeapSize
GetConsoleDisplayMode
FreeUserPhysicalPages
GetAtomNameA
SetConsoleCtrlHandler
GetModuleHandleA
LoadLibraryExA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapReAlloc
GetStartupInfoW
RaiseException
RtlUnwind
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
MultiByteToWideChar
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
Memory
Roses
Sos
Surrender
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ