GetGgillmp
GetHachiqdyw
InitAwqgkbxfuia
Hprbimlsal
Fpkfnwnhfcn
Ixntikqnwp
Wffsgorb
Static task
static1
Behavioral task
behavioral1
Sample
5b194816f19ea1c98c7a176187c23b8e_JaffaCakes118.exe
Resource
win7-20240704-en
Target
5b194816f19ea1c98c7a176187c23b8e_JaffaCakes118
Size
91KB
MD5
5b194816f19ea1c98c7a176187c23b8e
SHA1
5a22014219ba9e3499e3e28d76857761472ea1d3
SHA256
f66846f2e3098751946ddf7bae36bff0e2b428d5325617e1d552e91bb6f65f33
SHA512
718ee426d10f5f70843e0daf43c97fdcd1f57ea68280e4a783447c5b38ac3e0cef09c5116e3feb8f9a83f8ad3de1604793792b15eac10626963776c9bf82cc77
SSDEEP
1536:hSWMqty3I/cvxi9m5tsX07dkC2Gd1/0s2QLyGiqEis9y4B/w:hSwiI/4i9m5ykJk3Gdis2QeGiqs9F
Checks for missing Authenticode signature.
resource |
---|
5b194816f19ea1c98c7a176187c23b8e_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
VirtualProtectEx
OpenMutexA
GetLogicalDrives
GetThreadTimes
GetExitCodeThread
GetThreadSelectorEntry
ExitThread
WritePrivateProfileSectionA
WriteProcessMemory
GetConsoleInputExeNameA
VirtualAlloc
SetFilePointer
VirtualAllocEx
MapViewOfFile
GetModuleHandleA
ClearCommBreak
GetEnvironmentVariableA
GetComPlusPackageInstallStatus
GetProcessVersion
FatalAppExitW
_lopen
GetDefaultCommConfigA
ConnectNamedPipe
VirtualQuery
SetProcessWorkingSetSize
OpenFileMappingW
AddAtomA
UnregisterWaitEx
LoadLibraryExW
ReplaceFileA
GetDiskFreeSpaceExA
GetPrivateProfileIntA
CreateFileMappingA
GetFileAttributesA
RegisterServicesProcess
GetInternalWindowPos
UnpackDDElParam
GetScrollPos
ReleaseCapture
CreateDialogIndirectParamA
GetScrollPos
InsertMenuA
AdjustWindowRect
SendNotifyMessageA
DrawMenuBarTemp
GetInputState
SetDlgItemTextA
MapVirtualKeyExW
SetDebugErrorLevel
CallWindowProcA
GetMenuItemID
FlashWindow
OemKeyScan
ChildWindowFromPointEx
PostMessageA
EndTask
RegisterClassExW
GetWindowTextLengthW
GetGgillmp
GetHachiqdyw
InitAwqgkbxfuia
Hprbimlsal
Fpkfnwnhfcn
Ixntikqnwp
Wffsgorb
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ