_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
Static task
static1
Behavioral task
behavioral1
Sample
18050291c7cdda12a9559b7be1c75ac3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
18050291c7cdda12a9559b7be1c75ac3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
18050291c7cdda12a9559b7be1c75ac3_JaffaCakes118
Size
529KB
MD5
18050291c7cdda12a9559b7be1c75ac3
SHA1
c7e00f7b5cd99a5ca2f24852979f8f6291b80b1f
SHA256
e8b863377591953583a28487344e9aec3dd505d8ee6e8a2a1aeb46f9cbabe1dc
SHA512
c62dd3be9c57b3d8839952b8b6bac5681455b7b7834bf0d9d1365f0344cdb51448b542e5da45497263efdc97938f46b15ad62b70a3fda69ceb51b825bd03acf8
SSDEEP
12288:TYlgFceghzeMKYFTJERp9J6+DTTVQ3QB/M1Qkul0mU+Y:CeWe8FT49J6+5IQ9gQkul9U+Y
Checks for missing Authenticode signature.
resource |
---|
18050291c7cdda12a9559b7be1c75ac3_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CallNamedPipeA
ReadConsoleA
GetProfileSectionA
OpenSemaphoreA
ConnectNamedPipe
SetTapeParameters
GetProcessPriorityBoost
FindNextVolumeMountPointA
SetCommState
SetProcessPriorityBoost
GetPriorityClass
LoadLibraryW
GetConsoleMode
TerminateThread
CopyFileW
GetPrivateProfileStructW
ReadFile
lstrcatA
GetBinaryTypeW
SetEndOfFile
lstrlenW
RaiseException
InterlockedExchange
SetCurrentDirectoryA
GetStdHandle
FreeLibraryAndExitThread
GetCurrentDirectoryW
SetLastError
GetProcAddress
EnterCriticalSection
LocalAlloc
SetFileApisToANSI
AddAtomA
WaitForMultipleObjects
SetEnvironmentVariableA
LocalFree
lstrcpyW
CreateMutexW
GetACP
EnumResourceNamesW
GetLastError
MoveFileA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
HeapFree
DeleteCriticalSection
LeaveCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
GetModuleHandleA
AccessCheck
RevertToSelf
WinHttpCloseHandle
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ