axgdkcsoanmlsitlgjftqfswb
cnidibfuruom
gxngztwxhahxazpzao
qhagxbaeaqoviywb
zcvxjvmpymusauaofmnmeggc
Static task
static1
Behavioral task
behavioral1
Sample
dcf3d84f789f62ca63f68bc037cc160c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dcf3d84f789f62ca63f68bc037cc160c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dcf3d84f789f62ca63f68bc037cc160c_JaffaCakes118
Size
64KB
MD5
dcf3d84f789f62ca63f68bc037cc160c
SHA1
7b76487e2f21410200c6f29e6ae7efddc229a889
SHA256
e3cd1acbb6c5422d04442a1e463c40175ecb9a27e8a4a99ce1a93522f3f6bd9d
SHA512
da3a44f4f5f159922dc89fe782c8405f27b5b9a01c7f71deebbf5340975669750cdb3b8cf368db0dd2fee4d0b67718e1bdc1900c82dbccd188531ce82a80cba2
SSDEEP
1536:yErzmyDDPfCrg3POcd5BmLM9VLJor7rApFBuZzRtwg0sh:ywyyDDXt3POcULMfLJ8Y/BYz8g0s
Checks for missing Authenticode signature.
resource |
---|
dcf3d84f789f62ca63f68bc037cc160c_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetStartupInfoA
GetCommandLineW
GetSystemTimeAsFileTime
SetSystemPowerState
GetCPInfo
FormatMessageW
GetCurrentThread
GetVersionExW
TerminateProcess
CreatePipe
PeekNamedPipe
GetExitCodeProcess
GetEnvironmentVariableW
WinExec
SetUnhandledExceptionFilter
SetErrorMode
DuplicateHandle
GetModuleFileNameA
OpenMutexA
CreateMutexW
CreateMutexA
FlushFileBuffers
CreateEventW
GetTempFileNameA
GetVersion
LocalAlloc
LocalFree
FreeLibrary
LoadLibraryW
ExitProcess
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
WideCharToMultiByte
RemoveDirectoryW
MoveFileW
FindNextFileW
FindFirstFileW
TlsSetValue
TlsAlloc
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
GetProfileStringW
atoi
memmove
time
strncmp
fclose
fread
fseek
fopen
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
axgdkcsoanmlsitlgjftqfswb
cnidibfuruom
gxngztwxhahxazpzao
qhagxbaeaqoviywb
zcvxjvmpymusauaofmnmeggc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ