Memory
Roses
Sos
Surrender
Static task
static1
Behavioral task
behavioral1
Sample
9fc4b95a2f4876a71e57894eac84704d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9fc4b95a2f4876a71e57894eac84704d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
9fc4b95a2f4876a71e57894eac84704d_JaffaCakes118
Size
3.7MB
MD5
9fc4b95a2f4876a71e57894eac84704d
SHA1
3bd4e6695ffe9ef7c3523eadda6c686bd0e17274
SHA256
31d343b9071c0c94cca9bf45c9d0e02e9549675c0264fe3a41bf419c2918203b
SHA512
30819b48f07f0fd570010d906b912df8977259ff57c1c069142f1f5d400040b44773ec96833bd0f85046a2426b4664a64a09b2f0f36b898071c9e061108bc02f
SSDEEP
98304:W4irpjtUdJrziwkwBMLVp8atfDwAQz/cqqO1kNIP/8sm2l:WFtEFOJwaVpJtDwAQz3qAkSPR
Checks for missing Authenticode signature.
resource |
---|
9fc4b95a2f4876a71e57894eac84704d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
FindResourceA
HeapAlloc
GetCurrentProcess
GetModuleHandleExW
GetTimeFormatA
GetTickCount
GetConsoleAliasesA
ActivateActCtx
GlobalAlloc
GetLocaleInfoW
SizeofResource
GetFileAttributesA
FindNextVolumeMountPointW
CreateJobObjectA
GetProcAddress
HeapSize
GetConsoleDisplayMode
FreeUserPhysicalPages
GetAtomNameA
SetConsoleCtrlHandler
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapReAlloc
GetStartupInfoW
RaiseException
RtlUnwind
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapCreate
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
MultiByteToWideChar
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
Memory
Roses
Sos
Surrender
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ