?BeginForce##YGPAXU_POINTL###Z
?CellRinger@@YGPAXU_POINTL@@@Z
?HeartPulse@@YGPAXU_POINTL@@@Z
?LineHandle@@YGPAXU_POINTL@@@Z
?TimerConnect@@YGPAXU_POINTL@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
c16a938e86ba09a5ee0b9f157a2704ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c16a938e86ba09a5ee0b9f157a2704ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c16a938e86ba09a5ee0b9f157a2704ec_JaffaCakes118
Size
213KB
MD5
c16a938e86ba09a5ee0b9f157a2704ec
SHA1
71ce1c70a8d87822da6ffceacc5c9d4917370e40
SHA256
005aca840ead8fc74c6548d1533e15f3560bfcc37cf3df2feae952b5576e5b38
SHA512
ea8cc1c43799565a1d237656ca1f6c50df86710a18f7625045bfca382195de5f5ad7635dce02e6d54320bc8f263d9a978d804c1a8bd1033cb7698476494a78d4
SSDEEP
3072:ABbXjlgO0shBDi6D+SX6yqf6/SA2ilZfmS4X8WxvnzzTq6bRk3Hvn0h4vANQtuYA:CLBgOFND+c0CNltmSWfBnzvq6dh6ZA
Checks for missing Authenticode signature.
resource |
---|
c16a938e86ba09a5ee0b9f157a2704ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ord158
FindWindowW
GetDriveTypeW
NtReplyPort
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?BeginForce##YGPAXU_POINTL###Z
?CellRinger@@YGPAXU_POINTL@@@Z
?HeartPulse@@YGPAXU_POINTL@@@Z
?LineHandle@@YGPAXU_POINTL@@@Z
?TimerConnect@@YGPAXU_POINTL@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ