VjxnE
atnzFXgelaqLsep
bqzvboMacmKj
cacjlWwaYFeqtazczcu
geeqOopCkZsynvjq
iYadwvvlXqgunxG
ltguyxsfvdmsyckggbk
ocRozsNDxrzh
tovpQursjdzyqctxms
trbdLxm
uirijfVGwvdlhqk
yiQhjkYbuknu
Static task
static1
Behavioral task
behavioral1
Sample
2b6a5849bc7f782552c2f70f5d627166_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2b6a5849bc7f782552c2f70f5d627166_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2b6a5849bc7f782552c2f70f5d627166_JaffaCakes118
Size
573KB
MD5
2b6a5849bc7f782552c2f70f5d627166
SHA1
9414c84f74767f2439fe4ca72532f158429ba38f
SHA256
97c60b6da1e115c441cde395a475aad1e77af9adabddb13fcfea9f8ece393b84
SHA512
47ac2c1b14eba8eec6779525710c002e772d5e452b2a33318cd8e41e1a47a9b050f01dbbef102ec9ce7555a915dc1cef9aafca89c7559ae7d6875a7656ccdce3
SSDEEP
12288:7SxTKso8YGUnrtnkfeS5M2sQKyd/utmg3g+F5lCRha:75yUnrRKJcQowgw+YP
Checks for missing Authenticode signature.
resource |
---|
2b6a5849bc7f782552c2f70f5d627166_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wscanf
wcsrchr
sin
localtime
isalnum
fputc
_rmtmp
_ismbblead
_finite
_fileno
_exit
_c_exit
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA
double_from_ndr
RpcSmClientFree
RpcServerTestCancel
RpcMgmtStatsVectorFree
RpcMgmtSetComTimeout
RpcMgmtEpEltInqDone
RpcBindingSetAuthInfoExA
MesInqProcEncodingId
DceErrorInqTextA
ZwOpenIoCompletion
ZwDeleteAtom
RtlSetTimer
RtlSetAttributesSecurityDescriptor
RtlPrefixString
RtlNtStatusToDosError
NtSetLowWaitHighEventPair
NtLoadKey2
NtEnumerateValueKey
NtAllocateUuids
CsrFreeCaptureBuffer
RtlAddAuditAccessAce
SetCommState
CompareFileTime
ExitProcess
FindFirstChangeNotificationW
FindFirstFileExW
FindNextChangeNotification
GetACP
GetCPInfoExW
GetCommandLineA
GetDriveTypeW
GetTapeParameters
GlobalMemoryStatus
HeapAlloc
lstrcpyA
WaitForMultipleObjectsEx
VirtualFree
VirtualAlloc
VerLanguageNameW
VerLanguageNameA
TlsSetValue
SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriorityBoost
SetThreadLocale
SetThreadAffinityMask
SetLastError
OpenSemaphoreW
OpenMutexW
MultiByteToWideChar
LocalAlloc
LeaveCriticalSection
BeginUpdateResourceW
UnregisterGPNotification
RegisterGPNotification
LeaveCriticalPolicySection
CreateEnvironmentBlock
DestroyEnvironmentBlock
EnterCriticalPolicySection
ExpandEnvironmentStringsForUserW
FreeGPOListW
GetAppliedGPOListW
GetProfilesDirectoryW
VjxnE
atnzFXgelaqLsep
bqzvboMacmKj
cacjlWwaYFeqtazczcu
geeqOopCkZsynvjq
iYadwvvlXqgunxG
ltguyxsfvdmsyckggbk
ocRozsNDxrzh
tovpQursjdzyqctxms
trbdLxm
uirijfVGwvdlhqk
yiQhjkYbuknu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ