_fourthSoldier@4
_gekkon@4
_gifgeek@8
_thirdSoldier@8
Static task
static1
Behavioral task
behavioral1
Sample
5ea78b13ec1f3ba0a3f3ae234c9f16a0_JaffaCakes118.exe
Resource
win7-20240708-en
Target
5ea78b13ec1f3ba0a3f3ae234c9f16a0_JaffaCakes118
Size
4.0MB
MD5
5ea78b13ec1f3ba0a3f3ae234c9f16a0
SHA1
c8d3b85f13a986a357ab4aeb6c98399977b52a20
SHA256
5aa4e6282c60bd4d605ad27990defef4c71eb4141d59787a9c46e776d0102ad1
SHA512
e0d32c3aef14e115ee3673e6d618a2dc53abe20e5428c24cae2d7b3c6805a3eaf23c1c6592287498e707200b286de8229441c264e4fe5a9b5bf5bd7d211ddcca
SSDEEP
98304:gGLD2x+dn4Ns15gS5UFydQRzSr2fw9ffMp1W:gGLD9dnzVRQRWPf
Checks for missing Authenticode signature.
Processes:
resource |
---|
5ea78b13ec1f3ba0a3f3ae234c9f16a0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalLock
GlobalUnfix
GetPrivateProfileSectionNamesA
SetSystemPowerState
SetDefaultCommConfigA
SetStdHandle
InterlockedDecrement
GetSystemTimeAdjustment
CompareFileTime
Sleep
CallNamedPipeA
SizeofResource
GetPriorityClass
_lcreat
FreeLibraryAndExitThread
LoadLibraryW
BuildCommDCBAndTimeoutsA
GetProcAddress
lstrcpyA
LocalAlloc
ExitProcess
SetFilePointerEx
CopyFileW
SetEnvironmentVariableW
GetCurrentDirectoryA
SetCommState
GetOEMCP
SetUnhandledExceptionFilter
FindAtomW
WaitForMultipleObjects
CreateSemaphoreW
SetFileApisToANSI
EnumResourceNamesA
ConnectNamedPipe
GetPrivateProfileStructA
SetLocalTime
SetLastError
GetModuleHandleW
SearchPathA
GetFileAttributesW
lstrlenW
IsBadWritePtr
RaiseException
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
InterlockedIncrement
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
CloseHandle
CreateFileA
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
WriteConsoleA
GetConsoleOutputCP
_fourthSoldier@4
_gekkon@4
_gifgeek@8
_thirdSoldier@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ