_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
Static task
static1
Behavioral task
behavioral1
Sample
5220119e225daa8de7871e3f37183496_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5220119e225daa8de7871e3f37183496_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5220119e225daa8de7871e3f37183496_JaffaCakes118
Size
3.8MB
MD5
5220119e225daa8de7871e3f37183496
SHA1
eef71aab10366c2b255d37bdbc1e781edad26f7d
SHA256
570ba7e85cdfb0cdbeaf7e73c53bbfb89ac887922f6aa52e5f30dd1385416e57
SHA512
da8f76f7d0cb02c9b5f14bc5bab6ede78979856e2592d09c5ffa46a857088a717a870cf10998eb82e4dba3f8cd9beaca38d3a88559782bae1e5a52e83de8967a
SSDEEP
98304:ch5GLUmHEfWAT6tgGsMztidl3/f8e1R7ze3jME:ch5QxaTSIMulsqR7
Checks for missing Authenticode signature.
Processes:
resource |
---|
5220119e225daa8de7871e3f37183496_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetEndOfFile
BuildCommDCBAndTimeoutsA
ReadConsoleA
SetConsoleActiveScreenBuffer
CreateJobObjectW
ConnectNamedPipe
CallNamedPipeW
SetTapeParameters
GetProcessPriorityBoost
SetCommState
LoadLibraryW
TerminateThread
ReadFile
lstrcatA
GetBinaryTypeW
GetACP
lstrlenW
FindNextVolumeMountPointW
RaiseException
InterlockedExchange
SetLocalTime
GetStdHandle
FreeLibraryAndExitThread
SetLastError
GetProcAddress
CopyFileA
EnterCriticalSection
LoadLibraryA
LocalAlloc
IsSystemResumeAutomatic
SetFileApisToANSI
FindAtomA
GetPrivateProfileStructA
WaitForMultipleObjects
SetEnvironmentVariableA
CreateMutexA
EnumResourceNamesA
GetCurrentDirectoryA
OpenSemaphoreW
LocalFree
GetProfileSectionW
lstrcpyW
SetCurrentDirectoryA
SetPriorityClass
CreateFileA
GetLastError
MoveFileA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
HeapFree
DeleteCriticalSection
LeaveCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetModuleHandleA
GetLocaleInfoA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
SetThreadToken
RevertToSelf
WinHttpCloseHandle
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ