Ktkfrxvym
BeginQopropqcq
Mydjvyaxji
SetYfiaeefx
CreateCnblilaj
Fewjuuuan
Atwqmxe
Static task
static1
Behavioral task
behavioral1
Sample
bd762e00643b45c95d3e16d28eda0498_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bd762e00643b45c95d3e16d28eda0498_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bd762e00643b45c95d3e16d28eda0498_JaffaCakes118
Size
1.0MB
MD5
bd762e00643b45c95d3e16d28eda0498
SHA1
6c4f541671948f48603478fdc22711d4346de77b
SHA256
4924bf9a145d6a7cc91b0846d0d7d5709ff0ce3b83f95ae63d2784e992877323
SHA512
dc2652ed308fed4ff0a24a483be913a0c0bfcf92087f0aaeea200cb8c06a701a04ea3ae837265da1738db6e170d5e7f392d69bb6ae073df75395e22bb83ef393
SSDEEP
24576:8X1WYGqmQAt7C/NCA6luFS+yiqozA/o9KcPdq:y1Wm+7sNCxluFDyloQMKSdq
Checks for missing Authenticode signature.
resource |
---|
bd762e00643b45c95d3e16d28eda0498_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PulseEvent
VirtualFree
GetCurrentThread
GetVolumePathNameA
_lread
SetConsoleCursor
IsBadCodePtr
UnregisterConsoleIME
GetLastError
SetConsoleHardwareState
VirtualAlloc
ExitThread
GetProfileSectionW
ReadConsoleOutputAttribute
SetPropA
GetPriorityClipboardFormat
RegisterDeviceNotificationA
GetDlgItemTextA
PrivateExtractIconExA
SetWindowTextA
AllowSetForegroundWindow
GetKeyboardLayoutNameA
SendNotifyMessageA
CreateWindowStationW
GetAppCompatFlags
Ktkfrxvym
BeginQopropqcq
Mydjvyaxji
SetYfiaeefx
CreateCnblilaj
Fewjuuuan
Atwqmxe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ