_EXECryptor_GetHardwareID@0
_EXECryptor_IsAppProtected@0
Static task
static1
Behavioral task
behavioral1
Sample
6413f8af3fada98d84f3772beca605f2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6413f8af3fada98d84f3772beca605f2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6413f8af3fada98d84f3772beca605f2_JaffaCakes118
Size
1.3MB
MD5
6413f8af3fada98d84f3772beca605f2
SHA1
c6dcc03a34a9e69bc7734eeae7ada09d4bd5d0a9
SHA256
04d427b9d76db298bd1dcf0f6659c0f7f171b5118640e135234940c3f0489829
SHA512
2d3c3ea19ebb146367590d43c51ebd60dab66459e6bb5986076c0edee83c6e100ff71ed6703ed08e772e6aa85cd8182666cd225e09f572e36f0765af35484826
SSDEEP
24576:yeSY9p9nkqCrqY/Nh2zNskFcG9rMuDuDlglr0K0gpDtDyR:yeSY9Xrwev6ulrt0yDyR
Checks for missing Authenticode signature.
resource |
---|
6413f8af3fada98d84f3772beca605f2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcpy
InitCommonControls
_EXECryptor_GetHardwareID@0
_EXECryptor_IsAppProtected@0
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE