Gphwqbai
Aqcontetuwc
Static task
static1
Behavioral task
behavioral1
Sample
69ff4b6b676e5efe2aaca4ef4c52f6af_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69ff4b6b676e5efe2aaca4ef4c52f6af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
69ff4b6b676e5efe2aaca4ef4c52f6af_JaffaCakes118
Size
121KB
MD5
69ff4b6b676e5efe2aaca4ef4c52f6af
SHA1
4ac34c8a16c8cce6fe1dfbee76d4a0fb74d6d3f3
SHA256
bb6f19c50dba64c318321fc906b949bebe0783bc5255e277d8c481700d4f6697
SHA512
781539ad026ebbf83a2adf56416b48e8b5b1d3418f4a9bee76368ac206edd8e6abee499889a87df1d6daf0dd7b6e72348d1176806b980cda03a5bb57d162ee65
SSDEEP
1536:S+XiV+oAnaKp2AW+HetlqHS36oVDIH0IvwupptjepOpvd0ZjUTYYc7o:SgiVvdNUMlQ9USnvd0aTYYc7
Checks for missing Authenticode signature.
resource |
---|
69ff4b6b676e5efe2aaca4ef4c52f6af_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtect
ExitProcess
CloseWindow
SetForegroundWindow
Gphwqbai
Aqcontetuwc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ