_Gr
0o@12
Hs5@16
Static task
static1
Behavioral task
behavioral1
Sample
d568107809815871a46169f63ac52e0c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d568107809815871a46169f63ac52e0c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d568107809815871a46169f63ac52e0c_JaffaCakes118
Size
1.6MB
MD5
d568107809815871a46169f63ac52e0c
SHA1
84cff3d39a345706c3fbff66ec72d8e8c8322307
SHA256
434ee6626c57de4b6598963ce3f6ccc75421edc0126fa6f544a90f83e658c50a
SHA512
c78bdbdc012be9cc3c77c02f7761602908bb13f294e63067779a49b65b492c6b3a8bcc46f3a2a790e829b0b6b6f956dc5abce2798c4af1cc08abd8126311b20f
SSDEEP
24576:s/6UFMg4CBGR24IBMEwYXJnKimLghcgyPsmwKP0gR7QAaItHtL51P+zZlw/GObFw:JOBG8Nlw8blcg9hK8S7Hv51PpJ6
Checks for missing Authenticode signature.
resource |
---|
d568107809815871a46169f63ac52e0c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetWindowTextLengthA
ReleaseDC
RegisterClipboardFormatA
RegisterClassA
CharLowerA
ReleaseCapture
RegisterWindowMessageA
CreateMenu
GetMenuItemCount
CharUpperA
PathIsDirectoryA
SHDeleteKeyA
PathFileExistsA
SHQueryValueExA
GetDateFormatA
ExitProcess
GetModuleHandleA
GetDiskFreeSpaceA
GetFileSize
lstrlenA
GetFileAttributesA
VirtualAlloc
GetCurrentThreadId
GetEnvironmentStrings
GetACP
_Gr
0o@12
Hs5@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ