?FindByContext@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?FindSymbol@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?SpellCheck@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
Static task
static1
Behavioral task
behavioral1
Sample
499bce8d3c05708155b2e020d2bc8a96_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
499bce8d3c05708155b2e020d2bc8a96_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
499bce8d3c05708155b2e020d2bc8a96_JaffaCakes118
Size
54KB
MD5
499bce8d3c05708155b2e020d2bc8a96
SHA1
51e23eb355fb251de1bfdd39a42587337cf43cbb
SHA256
782c78a66cf665ff5655511aea6014553b53dce4ab356af4bc90d59eb03f49f7
SHA512
832f56598be1bdbb25f6548b95178aeec0d29c2ce6016d4870dd09e1a4f5faf0bf84cd63fafdebc72cb52d7e03d0ce0ae60a7918e64b6fe45f4474c18d5aad9d
SSDEEP
768:loFxytBUSIYX2o1HKcq72AlN62FoYGjXGDafWHZb/X9VjhDTZ:lwxIB3R2VcqFCMGb8afWxf9LN
Checks for missing Authenticode signature.
resource |
---|
499bce8d3c05708155b2e020d2bc8a96_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCmpLogicalW
PathStripToRootW
ord156
lstrcmpiW
GetComputerNameW
lstrlenW
?FindByContext@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?FindSymbol@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?SpellCheck@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ