?F3AAAAA42n2@@YGHPAXPAD@Z
?F3AAAAA42n@@YGXPAXPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
1c06462091c98fd064ffe1db22827359_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c06462091c98fd064ffe1db22827359_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
1c06462091c98fd064ffe1db22827359_JaffaCakes118
Size
63KB
MD5
1c06462091c98fd064ffe1db22827359
SHA1
1c6dddefe28730e96690d0ba091777d325d15f2d
SHA256
425a54470ca10406dae1934b393cc094647f590de384b693d98774b079891936
SHA512
64b59696a280f84f7ccbb4b014de0e021c32f69047f69217ea996fa6a16198a42b2739f4ba82c86a5cb1c277dda291428e7835e801432e68894561840e22f7ec
SSDEEP
1536:xMKM+25YhETqa1tYEUSYq7Gon4Qtmdr8BQ21kGJy:CAnSd7Ztmt8e21kMy
Checks for missing Authenticode signature.
resource |
---|
1c06462091c98fd064ffe1db22827359_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
AreFileApisANSI
GetProcAddress
CreateHardLinkA
OpenSemaphoreA
GetProcessDefaultLayout
EncryptFileA
MD5Init
?F3AAAAA42n2@@YGHPAXPAD@Z
?F3AAAAA42n@@YGXPAXPAD@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ