ReadIsnaioeo
CloseWdsgkgndxfm
CreateUykwphnkpds
CloseJmnvjai
CreateOhlmewpqq
Hdrdbmc
ClosePcqgxnro
Static task
static1
Behavioral task
behavioral1
Sample
33c8d4f5f4d17e4b7e7246e8b35b5664_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33c8d4f5f4d17e4b7e7246e8b35b5664_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
33c8d4f5f4d17e4b7e7246e8b35b5664_JaffaCakes118
Size
682KB
MD5
33c8d4f5f4d17e4b7e7246e8b35b5664
SHA1
8a178ffb74e8138572e96da4f05868c6ab53da97
SHA256
9fb947a4280d39b968f77a1c998e4891f5bc377debaa656f135ad70a5f57b6e3
SHA512
e286ae411912e04994d5251df65ecb0401c244d35d7d46b11fcb22d7ab63f8280159029f06d55c9c943a1dd42c2097bc5807cf15ddadf350828221493dc9c734
SSDEEP
12288:JpTdIkpdlBoDSB7a3SmGkP67Ih3se0gLWEvB8O1sIyfarNisS9rTU29k:mkXzoDSBO3SmGq6MhcHgL3/2RfskseM
Checks for missing Authenticode signature.
resource |
---|
33c8d4f5f4d17e4b7e7246e8b35b5664_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
ExitThread
GetCommMask
GetConsoleAliasExesLengthW
VirtualFree
lstrcmpA
GetLastError
GetCurrencyFormatA
EnumSystemCodePagesA
CreateNamedPipeA
VirtualAlloc
FillConsoleOutputCharacterA
GetProfileSectionW
SetEvent
CharNextExA
LoadLocalFonts
EnumPropsA
BroadcastSystemMessageExA
MonitorFromRect
AllowSetForegroundWindow
LoadBitmapA
GetWindowPlacement
DrawCaptionTempA
SendNotifyMessageA
DeleteMenu
ReadIsnaioeo
CloseWdsgkgndxfm
CreateUykwphnkpds
CloseJmnvjai
CreateOhlmewpqq
Hdrdbmc
ClosePcqgxnro
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ