_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
Static task
static1
Behavioral task
behavioral1
Sample
87f9d22bf811225e19d91a9af40c1901_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87f9d22bf811225e19d91a9af40c1901_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
87f9d22bf811225e19d91a9af40c1901_JaffaCakes118
Size
550KB
MD5
87f9d22bf811225e19d91a9af40c1901
SHA1
548679f7ce47bbd32601a07eb88c836bcb761046
SHA256
7950b5ccaa41c1998aa80f71b5b08f2144224b67cc5ad5377b092f6df4b1d269
SHA512
8bf944fcebad29ac7da9a18bd5a1b86ec29189c06eced3fcef44afcf69db1e5abcd74760dbbce022f186cc3f06e54541929113731a3490f1184cf44b12f1949b
SSDEEP
12288:njgQP+E20tzezMof6BbbjB1OeoZsqVTiiotcZZjbWyxvwF6tYxmSB:nMjEDiMM6BXl1jyVTiiSCZnWyxvwotXu
Checks for missing Authenticode signature.
resource |
---|
87f9d22bf811225e19d91a9af40c1901_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CallNamedPipeA
ReadConsoleA
GetProfileSectionA
OpenSemaphoreA
ConnectNamedPipe
SetTapeParameters
GetProcessPriorityBoost
FindNextVolumeMountPointA
SetCommState
SetProcessPriorityBoost
GetPriorityClass
LoadLibraryW
GetConsoleMode
TerminateThread
CopyFileW
GetPrivateProfileStructW
ReadFile
lstrcatA
GetBinaryTypeW
SetEndOfFile
lstrlenW
RaiseException
InterlockedExchange
SetCurrentDirectoryA
GetStdHandle
FreeLibraryAndExitThread
GetCurrentDirectoryW
SetLastError
GetProcAddress
EnterCriticalSection
LocalAlloc
SetFileApisToANSI
AddAtomA
WaitForMultipleObjects
SetEnvironmentVariableA
LocalFree
lstrcpyW
CreateMutexW
GetACP
EnumResourceNamesW
GetLastError
MoveFileA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
LeaveCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LoadLibraryA
SetFilePointer
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
GetModuleHandleA
AccessCheck
RevertToSelf
WinHttpCloseHandle
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_ydtiuiei7@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ