AOA
X_X
lp1
Static task
static1
Behavioral task
behavioral1
Sample
aim point/Hitmanden Bir aim point hack.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aim point/Hitmanden Bir aim point hack.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
sınırsız mermi/sınırsız bomba/Fraps.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
sınırsız mermi/sınırsız bomba/Fraps.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
sınırsız mermi/sınırsız bomba/WTChams.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
sınırsız mermi/sınırsız bomba/WTChams.dll
Resource
win10v2004-20240611-en
Target
171c9f0c95807721fdb59d963e430547_JaffaCakes118
Size
179KB
MD5
171c9f0c95807721fdb59d963e430547
SHA1
f31d513a9ecec0fad7cb75b88f090d446320f7c3
SHA256
2d141617353cf342c48acb3a339cd981bd0b1424ede098a2298dcef49b1caa9a
SHA512
66c9b883e955d6ec5626019682c8e36d8fd7461bbe330e80142eecfd1a0b6cd0d91b809d4e50ceb274a99049ed9f2b7c91dc5e15a2abc35c16e2d2b632ecb52e
SSDEEP
3072:CVJ7IPykSaHQCclCBVMeqN+IcYgZ1N4/16t1Fv1Ya8oT3WBELg3x8fAUBeYMbYvw:CJ88kHcCVMe4+F1wYtZgMg3uAU8YMbYo
Checks for missing Authenticode signature.
resource |
---|
unpack001/aim point/Hitmanden Bir aim point hack.exe |
unpack001/sınırsız mermi/sınırsız bomba/Fraps.exe |
unpack001/sınırsız mermi/sınırsız bomba/WTChams.dll |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxW
MessageBoxA
__CppXcptFilter
GetSystemTimeAsFileTime
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
AOA
X_X
lp1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ