?FindByContext@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?FindSymbol@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?SpellCheck@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
Static task
static1
Behavioral task
behavioral1
Sample
dfbf37e5595267575fe12b0be368a49d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
dfbf37e5595267575fe12b0be368a49d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dfbf37e5595267575fe12b0be368a49d_JaffaCakes118
Size
55KB
MD5
dfbf37e5595267575fe12b0be368a49d
SHA1
2cca83964fe36c4589030d50eba14c4583476e35
SHA256
055ed576a819f83d8275ee42a25e286affa6c22ce33d7236466d1123b2f81ead
SHA512
86c7f75728cbf6bfde165800f52da30fee277a34fcde37402e0612d16a70530d6c8a19ebc002451c637bf3fec9da1e970b079eac232660ba731f32ec22412035
SSDEEP
1536:lLMdtmycvi+DoqqKj4X4ZuHaAlQe5nLOH:y6ycviNfef2QI
Checks for missing Authenticode signature.
resource |
---|
dfbf37e5595267575fe12b0be368a49d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCmpLogicalW
StrCmpNIW
ord156
PathStripToRootW
lstrlenW
GetSystemWindowsDirectoryW
lstrlenA
?FindByContext@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?FindSymbol@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
?SpellCheck@252KPAUHINSTANCE__@@U_SYSTEM_INFO@@`M
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ