_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
Static task
static1
Behavioral task
behavioral1
Sample
53245472a694f3ad439287727b6de6f1_JaffaCakes118.exe
Resource
win7-20240705-en
Target
53245472a694f3ad439287727b6de6f1_JaffaCakes118
Size
243KB
MD5
53245472a694f3ad439287727b6de6f1
SHA1
e91a72d96fdd5edd30364034d743293af0fc888e
SHA256
ea1c573cb646732f1c33cd0a4ce988e3c07e32d23ba8b69147904a9b86126e0e
SHA512
829dff63a8d563451e5bb10e5e092cea73b65f06356462184ddddbd4ca028f56e3d377b8eaf45453170eeb4555697e2ab481a49c760b3b19fc18d5544795d555
SSDEEP
3072:s4/x7UKhFLQQDxfTSEyaovphmd/h7u9q7vNkO0I7pOurg2f1o1BMwLk5nxpW:bx7UYLQQ9fTSAJu9q7eU1qXMwWxp
Checks for missing Authenticode signature.
Processes:
| resource |
|---|
| 53245472a694f3ad439287727b6de6f1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
BuildCommDCBAndTimeoutsA
ReadConsoleA
SetConsoleActiveScreenBuffer
CreateJobObjectW
ConnectNamedPipe
CallNamedPipeW
SetTapeParameters
GetProcessPriorityBoost
LocalFlags
SetCommState
GlobalAlloc
LoadLibraryW
TerminateThread
ReadFile
lstrcatA
GetBinaryTypeW
GetACP
lstrlenW
FindNextVolumeMountPointW
RaiseException
InterlockedExchange
SetCurrentDirectoryA
SetEndOfFile
FreeLibraryAndExitThread
SetLastError
GetProcAddress
CopyFileA
EnterCriticalSection
GetLocalTime
IsSystemResumeAutomatic
FindAtomA
GetPrivateProfileStructA
GetTapeParameters
WaitForMultipleObjects
SetEnvironmentVariableA
CreateMutexA
EnumResourceNamesA
GetCurrentDirectoryA
OpenSemaphoreW
GetProfileSectionW
lstrcpyW
AreFileApisANSI
GetStdHandle
SetPriorityClass
CreateFileA
GetLastError
MoveFileA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
HeapFree
DeleteCriticalSection
LeaveCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetModuleHandleA
GetLocaleInfoA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
SetThreadToken
RevertToSelf
WinHttpCloseHandle
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ