Epgwdwdin
CloseCbenxwm
ReadEoskajcy
Ppadjdskft
Qejhoiqrl
Jnnorhkuq
EndQqkefqyslo
Static task
static1
Behavioral task
behavioral1
Sample
61d6ee28d0ea050a13aedee1685fe310_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61d6ee28d0ea050a13aedee1685fe310_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
61d6ee28d0ea050a13aedee1685fe310_JaffaCakes118
Size
33KB
MD5
61d6ee28d0ea050a13aedee1685fe310
SHA1
e0c630ad55844f0db60c2999476db9ac937fec0e
SHA256
0e8c86663359113dc016ac60b069da3d539af23a27107c683a8a4b41e3140849
SHA512
01a768f0111a0118a133532621b75c514c7339575f2d2fd05119faf9514bcf339c001909caa804cc022e9a4271037652d96f2eaccc05cf18f1589e779a84d5e2
SSDEEP
384:t8awCbhFvMHx7rKnGlgr/ADHgfJYFIBUHYU/9ii6pAS4yruTAy4kayYAuIp:rZhFVGlsAH8JOIB+/Ii6aSX3y4keAu
Checks for missing Authenticode signature.
resource |
---|
61d6ee28d0ea050a13aedee1685fe310_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
EndUpdateResourceA
VirtualFree
GetFileAttributesExA
VirtualAlloc
GetLastError
GetCommTimeouts
IsBadStringPtrA
GetFileTime
WriteConsoleInputA
GetProfileSectionW
GetLogicalDriveStringsA
ExitThread
PeekConsoleInputA
FindResourceA
IsDialogMessage
SendNotifyMessageA
AllowSetForegroundWindow
TranslateAccelerator
SetClipboardViewer
OpenWindowStationA
DrawTextA
CreateIconFromResourceEx
SetWindowTextA
CreateIconIndirect
RegisterLogonProcess
Epgwdwdin
CloseCbenxwm
ReadEoskajcy
Ppadjdskft
Qejhoiqrl
Jnnorhkuq
EndQqkefqyslo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ