Hckc
Iquefwvcg
Ircrmuepx
Qmwaap
Static task
static1
Behavioral task
behavioral1
Sample
31b1b218b54fc0f7c70f9c1fb46876f1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31b1b218b54fc0f7c70f9c1fb46876f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
31b1b218b54fc0f7c70f9c1fb46876f1_JaffaCakes118
Size
29KB
MD5
31b1b218b54fc0f7c70f9c1fb46876f1
SHA1
f867ced4cb225d71636ca6fadf2a0f581facc734
SHA256
7ac1298a7bdc1f376882e7514aa030dced6a8db7cf6defb80e10c073814838c0
SHA512
19cc25f7bff463fda512d0e78d79b14435a8e36f25a0f72f7a982e623dfbc0be113aba96bb163844080905b2698db25603552123541843dcf83dfd665a2e96ca
SSDEEP
768:5ydBgQEm5VMxOH1/sdWmI6VonaPtP4ATvP1yerKk:5rQD5TkIS9tP4wPT3
Checks for missing Authenticode signature.
resource |
---|
31b1b218b54fc0f7c70f9c1fb46876f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
ExitProcess
FreeResource
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
RtlUnwind
SetUnhandledExceptionFilter
lstrcatA
lstrcpynA
CreateAcceleratorTableA
LoadCursorFromFileA
SetMenuInfo
DestroyCaret
LoadAcceleratorsA
RegOpenKeyExA
RegEnumKeyA
LsaLookupPrivilegeDisplayName
LsaICLookupSids
LsaGetUserName
LsaEnumerateTrustedDomains
LsaEnumeratePrivileges
__vbaFileCloseAll
__vbaDerefAry
__vbaDateR4
__vbaCyUI1
__vbaCyI2
__vbaCyAdd
__vbaCopyBytesZero
__vbaBoolErrVar
__vbaAryVarVarg
__vbaAryRecMove
__vbaAryDestruct
__vbaAryConstruct
__vbaCyForNext
DirectInputCreateEx
DirectInputCreateA
DirectInputCreateW
Hckc
Iquefwvcg
Ircrmuepx
Qmwaap
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ