CloseYmryrtpyyht
WriteBdnevqqhd
IsIocdfctht
Pwckjvbd
InitIpsmmpou
CreateXhsevwrk
CloseUbjljga
Static task
static1
Behavioral task
behavioral1
Sample
8bb9975c88efabd2bae276ca20b72ab8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8bb9975c88efabd2bae276ca20b72ab8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8bb9975c88efabd2bae276ca20b72ab8_JaffaCakes118
Size
1.0MB
MD5
8bb9975c88efabd2bae276ca20b72ab8
SHA1
fbc6e7dd269d276a5be8a9c774507fdefdde13fe
SHA256
87e04ae1125f03018d90b29a1a45ce575dd443077c58684de8ce9a8c00edc7d1
SHA512
f66bcd1681cc28aa23bf9176b3f14359d06e94e649df1d03241244cc7e8494393581283f7d1aab4e599a1e33ee696a3f50b1993757105a5f8e3841b6ae44926c
SSDEEP
24576:UnRNLxW1x5R4wJGJ1KOvoeW2uN5q/7mDVNnxQr8WMwt6:CU35kw/I/7K67
Checks for missing Authenticode signature.
resource |
---|
8bb9975c88efabd2bae276ca20b72ab8_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
ExitThread
VirtualAlloc
GetCurrentDirectoryA
VirtualFree
GetVolumeNameForVolumeMountPointA
FindFirstVolumeMountPointA
GetLastError
PeekConsoleInputA
PulseEvent
SleepEx
SetFileAttributesA
GetCommandLineA
GetProfileSectionW
GetFullPathNameA
InvalidateRgn
SendNotifyMessageA
CharUpperBuffA
GetMouseMovePointsEx
GetThreadDesktop
AllowSetForegroundWindow
BeginDeferWindowPos
MessageBoxA
CharLowerBuffA
CreateWindowStationA
GetActiveWindow
CloseYmryrtpyyht
WriteBdnevqqhd
IsIocdfctht
Pwckjvbd
InitIpsmmpou
CreateXhsevwrk
CloseUbjljga
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ