qzsw
junb
Static task
static1
Behavioral task
behavioral1
Sample
d7b4f35ff3c660a0dbfc3ce84a74680d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d7b4f35ff3c660a0dbfc3ce84a74680d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d7b4f35ff3c660a0dbfc3ce84a74680d_JaffaCakes118
Size
83KB
MD5
d7b4f35ff3c660a0dbfc3ce84a74680d
SHA1
eb98f8f283ff2eb7b57a22ebac15978b790fb47f
SHA256
d1542300c9eb8ca823956917aeb23fcf00753a11c3fc5a26586e29757ec3a64f
SHA512
ac34c7b1c481bd1cc019720827e7e2cdba956860f514debcd24d6e97a2373320afbd2e287875c4d5dd7b41fdc4392eea0419927f2cfb04b522aab114be4abc57
SSDEEP
768:eUGKKDVX7piAfvR3uQCQ88ZcoexnnnnnnnnnnnnnnnnnnSqlzI4KklsugzPjk+Ok:ePDRN7Rl7cLa4Kk8zLkpioU/qfxTzdq
Checks for missing Authenticode signature.
resource |
---|
d7b4f35ff3c660a0dbfc3ce84a74680d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetMessageW
MessageBoxExA
MessageBoxExA
LoadMenuW
LoadIconA
DispatchMessageA
GetClassLongA
InsertMenuA
LoadImageW
CharToOemW
GetWindow
PostMessageA
LoadBitmapA
CmMalloc
CmRealloc
CmAtolA
InterlockedIncrement
CreateProcessA
ReadConsoleW
GetFileAttributesA
LoadLibraryExA
lstrcpy
TlsAlloc
FindResourceExA
SetErrorMode
LocalFileTimeToFileTime
WaitForSingleObject
SetLocalTime
GetTickCount
FindNextFileW
CreateProcessA
GetTempFileNameA
lstrlen
GetProcAddress
CreateJobObjectW
GetCommandLineW
CreateJobObjectW
TlsSetValue
CreateFileA
CreateEventW
lstrlenW
LoadLibraryA
Ctl3dGetVer
Ctl3dRegister
qzsw
junb
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE