_EXECryptor_GetHardwareID@0
_EXECryptor_IsAppProtected@0
Static task
static1
Behavioral task
behavioral1
Sample
af9192ab937d8e8debb78c0cb734f50d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
af9192ab937d8e8debb78c0cb734f50d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
af9192ab937d8e8debb78c0cb734f50d_JaffaCakes118
Size
1.1MB
MD5
af9192ab937d8e8debb78c0cb734f50d
SHA1
97fd429e0d53d182cace892526243c3bd5d7abd4
SHA256
537864d571ac19ea379ab250ed1ecd9dc5bb40da5a362e539f4b697ead9253ca
SHA512
8a46a2abc0de4068ce28e6cba7d0feb5d8cc70ede3b7c81dcbda8877f092087e26b2e013e880f7e835cf32c84f669a68c5c45a970e2cffe4243a330da2b7b186
SSDEEP
12288:IbJZIq16w6Sltf2nwb6qPRXDm2cUUKL+IO55pG6TDO4metoJI3ikRzgENx47v/dS:IbL/2nwxXK24KqTdrjaJIyapQeVcHC
Checks for missing Authenticode signature.
resource |
---|
af9192ab937d8e8debb78c0cb734f50d_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcpy
InitCommonControls
_EXECryptor_GetHardwareID@0
_EXECryptor_IsAppProtected@0
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE