?CoolerOptions@[SXH_KK]V
?GetImpersunt@[SXH_KK]V
Static task
static1
Behavioral task
behavioral1
Sample
db6edbcbc2d0993e512e757250e41e3b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db6edbcbc2d0993e512e757250e41e3b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
db6edbcbc2d0993e512e757250e41e3b_JaffaCakes118
Size
36KB
MD5
db6edbcbc2d0993e512e757250e41e3b
SHA1
f25d5898ea2d4e8a52bb6d584cf65fb21725e1a6
SHA256
9f40c32b30fcf8293d4cb0d6ec7e3732e6b52f688b6b15578b3c7d6b0bedc4b1
SHA512
cbd6f713095826645351a4ace262b9d2f33131e1503c2216221c0dc572b5d2ec10428a38d08050d25ce4bc36fa104389c0341af26a02b2342358aa63fec81222
SSDEEP
768:8NeEHKiZ2T6rl8UDxSjod2YeWVXjN0/POvPe0wkz1FgecweRM5LMDB:8Ne6Xe6rl8Ucj22YeWR6OvPXwn5wiMW
Checks for missing Authenticode signature.
resource |
---|
db6edbcbc2d0993e512e757250e41e3b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCmpLogicalW
PathStripToRootW
StrCmpNIA
lstrlenW
GetModuleHandleW
GetSystemDirectoryA
?CoolerOptions@[SXH_KK]V
?GetImpersunt@[SXH_KK]V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ