fvsuuysuxxjjj
mdnydxyhe
zpukgmukzhuykrc
Static task
static1
Behavioral task
behavioral1
Sample
cfddca8ddfab1b197ba7073ef49c03f4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cfddca8ddfab1b197ba7073ef49c03f4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
cfddca8ddfab1b197ba7073ef49c03f4_JaffaCakes118
Size
128KB
MD5
cfddca8ddfab1b197ba7073ef49c03f4
SHA1
173ee56d09eff0152d8e0fbbde8a4d5ad148eda9
SHA256
99a80254dc3f8d962375b988e8a779cbbaccfc2940ccfe5bed52d1fe2ba3ab0f
SHA512
667c09782931cf56e38528b18e41ffc5ef7bbbb82396481dadab31833e8bcd5ca6b75ac9ea6f9fa62525d952612a37817490b31c5f146f762a1c9df080e1d0b5
SSDEEP
1536:yRhaW9yRFmj3/Iruw3It/7avoXMBgITL9xJOCnFtLo+NiI1Iu:yRhaW9UoLWusvocBvT5x1Fi+NJF
Checks for missing Authenticode signature.
resource |
---|
cfddca8ddfab1b197ba7073ef49c03f4_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcess
VirtualAlloc
HeapAlloc
TerminateProcess
LoadLibraryA
IsBadReadPtr
lstrcmpiA
GetProcAddress
GetStringTypeW
AssignProcessToJobObject
GetProcessHeap
UpdateResourceA
RedrawWindow
TrackPopupMenuEx
DefDlgProcA
EndPath
GetCurrentPositionEx
GetTextCharsetInfo
StrokePath
fvsuuysuxxjjj
mdnydxyhe
zpukgmukzhuykrc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ