Plrhvscjt
EndYuimaakobm
IsPqwwmyrsk
CreateUuyuapuolqh
WriteEqfjjpsh
ReadNjxmpahavqc
Sdkhdku
Static task
static1
Behavioral task
behavioral1
Sample
425287d35bac9f79fdaa7035447e228d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
425287d35bac9f79fdaa7035447e228d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
425287d35bac9f79fdaa7035447e228d_JaffaCakes118
Size
1.0MB
MD5
425287d35bac9f79fdaa7035447e228d
SHA1
3abd1627e467e7758b5e9d30b3ae2b74b14aba3a
SHA256
e538cf4f6fde530035b0fb3120d5d08210718eaa84c048ddf0b0982becff3183
SHA512
9338d9ad40c0dca37c2d24cea3cc3104bf9f0c606867907b2056cdbec25babee5fc8368df346fe51ccf6246332f431934e567865b11fcd4ccadbb00254aa9965
SSDEEP
24576:iQqe/0pL6DZnQDIVOrpYyMVOHH+q5jQjAuJ8yIpzR+:iNeGaZnQDD1IO+q2jdJ8I
Checks for missing Authenticode signature.
resource |
---|
425287d35bac9f79fdaa7035447e228d_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
FindNextChangeNotification
HeapSummary
RegisterWaitForSingleObject
GetProcessHandleCount
GetTempPathA
TerminateJobObject
VirtualFree
SetInformationJobObject
PeekConsoleInputA
IsSystemResumeAutomatic
GetProcessHeap
VirtualAlloc
CreateJobObjectA
GetProfileSectionW
ShowCursor
SetScrollRange
GetLastInputInfo
DispatchMessageA
DeregisterShellHookWindow
GetDC
TileWindows
CascadeWindows
SwitchDesktop
SetCapture
SendNotifyMessageA
GetAppCompatFlags
Plrhvscjt
EndYuimaakobm
IsPqwwmyrsk
CreateUuyuapuolqh
WriteEqfjjpsh
ReadNjxmpahavqc
Sdkhdku
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ