_rcQvpOJqTYI@8
7GLjd@4
TV8MvWHMTjOY
4T0Kua6R@8
L_Udk7Gl1eK@4
_4NKpxwoe6Ntb7p@24
X91NW71hP@4
_rNWCKuTQfOhJx@24
0342NAaoW4PPra@8
_t4_xduEJs
YRvlA@24
Static task
static1
Behavioral task
behavioral1
Sample
49d20cf88d90856c9a8e6d2779c5b223_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
49d20cf88d90856c9a8e6d2779c5b223_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
49d20cf88d90856c9a8e6d2779c5b223_JaffaCakes118
Size
135KB
MD5
49d20cf88d90856c9a8e6d2779c5b223
SHA1
380df7bbc788d702672c83e05dad82c6996d3029
SHA256
4f5a932c78a3fc63af2183321925ea77e05e0224cfb682e244e797833dc9c30f
SHA512
3c300465eacc8450349cdc1bb226eb3db631245e391786e07433dd98c56bebccb5b8968b012f37c48167004d096d2bd88bcd6dc1d42a005876de8f07b0c4bf31
SSDEEP
3072:zdN7sQtYyLbcwyx7iSpWQWqJW/lIupQ8qZ4WccTi7:BvLEvfiSuix4WccTi
Checks for missing Authenticode signature.
resource |
---|
49d20cf88d90856c9a8e6d2779c5b223_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Shell_NotifyIconA
GetDateFormatA
GetModuleHandleA
GetDiskFreeSpaceA
GetEnvironmentStrings
GetCurrentThreadId
LoadLibraryA
VirtualAllocEx
GetOEMCP
ExitProcess
VirtualAlloc
_acmdln
wcscspn
time
mbstowcs
sqrt
malloc
exit
calloc
memset
memmove
GetMenu
TrackPopupMenu
IsDlgButtonChecked
ShowScrollBar
SystemParametersInfoA
GetWindowTextLengthA
ShowWindow
_rcQvpOJqTYI@8
7GLjd@4
TV8MvWHMTjOY
4T0Kua6R@8
L_Udk7Gl1eK@4
_4NKpxwoe6Ntb7p@24
X91NW71hP@4
_rNWCKuTQfOhJx@24
0342NAaoW4PPra@8
_t4_xduEJs
YRvlA@24
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ