Xmtorvowbi
Pbwtglgnnb
GetUrhtepty
Eiksbiatle
Static task
static1
Behavioral task
behavioral1
Sample
3056999da5f8d84eaa6240108c141c38_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3056999da5f8d84eaa6240108c141c38_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
3056999da5f8d84eaa6240108c141c38_JaffaCakes118
Size
63KB
MD5
3056999da5f8d84eaa6240108c141c38
SHA1
09afc10a538f599ba91df0dc599f8cd5a69f1d8d
SHA256
6c662f9c014237d4a0f2c9919c1c372c557c84755f90210fa69bfda0db3ec510
SHA512
6e69dbc878ee2c7b6b21b40f5d4a54984c651a207e924ef1b16a387988eb81b084b62eed922cd4e334cfc532e9055f713235324f2f50e135f0f5474289aeda34
SSDEEP
1536:+W4d/KyLzWdzHM3DN6U/holA0Xr8TjsV8:+7HfWdzHqoU8zgk8
Checks for missing Authenticode signature.
resource |
---|
3056999da5f8d84eaa6240108c141c38_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCommandLineA
VirtualProtect
GetModuleHandleA
ExitProcess
ExitThread
GetStartupInfoA
GetModuleFileNameA
DuplicateToken
ImpersonateNamedPipeClient
Xmtorvowbi
Pbwtglgnnb
GetUrhtepty
Eiksbiatle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ