Qaafxaojfco
ReadWtfgtepe
Wqnosew
Jsbtbdyn
Static task
static1
Behavioral task
behavioral1
Sample
d58c848a597ff9ce60557f0825bbceb6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d58c848a597ff9ce60557f0825bbceb6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d58c848a597ff9ce60557f0825bbceb6_JaffaCakes118
Size
38KB
MD5
d58c848a597ff9ce60557f0825bbceb6
SHA1
f7cba3ea7b9a748cef663696ff9167d85de945ca
SHA256
578f42e518ea6a10944502b86a75e26c7e49f36ae36b778f6238f00c94aae550
SHA512
9509bfb24cbc554dd91ac92d600219a9878a90555df40feef09e5a12f1561f0142cc55d842a959142a8800a8983fa9afd32ee55196029cdb9cbd8f3d1af3bd84
SSDEEP
768:yuR04MMlKV6kAYu9mZllNl1H2cr8hssyNMYh32s2OM:yutwkou9MlNlJ2cr8qsxg9
Checks for missing Authenticode signature.
resource |
---|
d58c848a597ff9ce60557f0825bbceb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetPrivateProfileStringA
RtlUnwind
DebugBreak
GetEnvironmentStringsA
VDMOperationStarted
SetProcessShutdownParameters
SetConsoleHardwareState
GetCommandLineA
ExitProcess
GetStartupInfoA
Qaafxaojfco
ReadWtfgtepe
Wqnosew
Jsbtbdyn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ