_Trooper@8
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_wsefwsrgwrg@4
Static task
static1
Behavioral task
behavioral1
Sample
70b5b98d618d33c9ed00df36ee08f5d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70b5b98d618d33c9ed00df36ee08f5d2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
70b5b98d618d33c9ed00df36ee08f5d2_JaffaCakes118
Size
3.9MB
MD5
70b5b98d618d33c9ed00df36ee08f5d2
SHA1
aff7f0e751e8745b238c269b7c2b45903eaf5b63
SHA256
7beb5cb95159a428a8c975e7d516133f70770adecf0375164a7d5846653c8343
SHA512
94178a610317ef639eb95f065b1341b4534a3707052c88b8d7abdd78462abb1362ccb4c0b6e0a4ad97420b0443e57f1c5ccadea0c289870d6d12936600ac5e32
SSDEEP
98304:LwtR0hOAQOkAjaXrtW9mMbwSPh1d0wElB:EtKhSO/aXPMrTdjEl
Checks for missing Authenticode signature.
Processes:
resource |
---|
70b5b98d618d33c9ed00df36ee08f5d2_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetPriorityClass
SetEndOfFile
GetCommState
ReadConsoleA
InterlockedDecrement
SetConsoleActiveScreenBuffer
CreateJobObjectW
WaitForSingleObject
OpenSemaphoreA
ConnectNamedPipe
CallNamedPipeW
SetTapeParameters
LocalFlags
SetProcessPriorityBoost
LoadLibraryW
TerminateThread
GetPrivateProfileStructW
lstrcatA
GetBinaryTypeW
GetACP
lstrlenW
FindNextVolumeMountPointW
RaiseException
SetCurrentDirectoryA
GetStdHandle
FreeLibraryAndExitThread
GetCurrentDirectoryW
SetLastError
GetProcAddress
CopyFileA
EnterCriticalSection
GetLocalTime
LocalAlloc
BuildCommDCBAndTimeoutsW
IsSystemResumeAutomatic
FindAtomA
GetTapeParameters
SetEnvironmentVariableA
CreateMutexA
EnumResourceNamesA
GetProfileSectionW
lstrcpyW
AreFileApisANSI
WideCharToMultiByte
InterlockedIncrement
MultiByteToWideChar
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetLastError
MoveFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
GetCPInfo
HeapValidate
IsBadReadPtr
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
DebugBreak
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
GetModuleFileNameA
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetStringTypeA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
GetModuleHandleA
CloseHandle
CreateFileA
_Trooper@8
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_wsefwsrgwrg@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ