SetExtChangeZip
UnZipData
UnZipDataToDirectory
UnZipDataToFile
UnZipFile
ZipData
ZipFile
_CloseD3d@0
_InitD3D@4
_smPlayD3D@24
Static task
static1
Behavioral task
behavioral1
Sample
36892e41fb893c544a1425a17c913a9d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36892e41fb893c544a1425a17c913a9d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
36892e41fb893c544a1425a17c913a9d_JaffaCakes118
Size
3.6MB
MD5
36892e41fb893c544a1425a17c913a9d
SHA1
74bde0be73e7b383dc6a67ab2d60355f84c727cf
SHA256
ea6bc58fc199c8203ac64766578dfeb28f20b65a568aa891379ecf436933d2ec
SHA512
27c1dd122b5db45b12f5b2dc6ad9e4b598e9be431a44f7492ea819dc633412ee89cbb5e19879ce790ce4165e18ef6141c90d0892b3f833755ed89725caf49c1f
SSDEEP
49152:xKzl05jzBlnCTuSJgbn2LBcPpkAKGSx1mCJoOIAK6x+2rwU7g4+0y2AGq0jpb:QR6zjOcoMp+GSx1mwxIh6x+uwySGBpb
Checks for missing Authenticode signature.
resource |
---|
36892e41fb893c544a1425a17c913a9d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrcpy
InitCommonControls
SetExtChangeZip
UnZipData
UnZipDataToDirectory
UnZipDataToFile
UnZipFile
ZipData
ZipFile
_CloseD3d@0
_InitD3D@4
_smPlayD3D@24
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE