?zal2pha0@@YGXKPADK@Z
?zal2pha@@YGHPAXPADK@Z
?zalp2ha21@@YGXKPADK@Z
Static task
static1
Behavioral task
behavioral1
Sample
881a6c2b205763d0accea0046341d4cd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
881a6c2b205763d0accea0046341d4cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
881a6c2b205763d0accea0046341d4cd_JaffaCakes118
Size
10KB
MD5
881a6c2b205763d0accea0046341d4cd
SHA1
390d9cc56ef00a370a9ed91b8e73eeb1d789a195
SHA256
7cbb8f150fcf4f0ca81aded09854da65727468872fe702597bc49a276c8af32a
SHA512
4b3dc64344c1cd1aa7607e116e3c9908929a474360cdc5d8f1e9f5d1371a0ad7ea907ab7a3bfe849b057ef32053dab0f8e0032a0df75fddb55c691c2b914b287
SSDEEP
192:H7gO0tCE85i9gjxcxx61f93kqCXtRH5nKQjegqbID+e:HRxigxcxxkfRU9RZjfqAD
Checks for missing Authenticode signature.
resource |
---|
881a6c2b205763d0accea0046341d4cd_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetCurrentThreadId
GetModuleHandleA
WaitForMultipleObjects
GetProcAddress
?zal2pha0@@YGXKPADK@Z
?zal2pha@@YGHPAXPADK@Z
?zalp2ha21@@YGXKPADK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE