getBuss
getCuss
getMuss
Static task
static1
Behavioral task
behavioral1
Sample
b5294c35c7748e6718ebc05fbe59a851_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5294c35c7748e6718ebc05fbe59a851_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b5294c35c7748e6718ebc05fbe59a851_JaffaCakes118
Size
88KB
MD5
b5294c35c7748e6718ebc05fbe59a851
SHA1
c04adfd93ef24b10c6fb161c2ab984eaf03c35ee
SHA256
e53038fd42e56089142c00a90dd031f4832fdc22b1a2623840582c5339b5eec1
SHA512
a3ffa309b29e6b4222de105c916818a7d6afcbb121b9000af646655aa4626b7a3d0bc4b08da9131ce479f353a9e8139772d0f47fbccb9a34d20e0a0e460f0c32
SSDEEP
1536:AToy9tgxhiApllhOGf8vdnBxOQSWjnSOaa5HvTOxsrxSAP1EdMdX3j:Akamrng28f0dXgHvT1PpdHj
Checks for missing Authenticode signature.
resource |
---|
b5294c35c7748e6718ebc05fbe59a851_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleW
VirtualAlloc
GetProcAddress
EnumProcesses
getBuss
getCuss
getMuss
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE