Memory
Roses
Sos
Surrender
Static task
static1
Behavioral task
behavioral1
Sample
e2111cb3b07841995b0a0e4678c69c85_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e2111cb3b07841995b0a0e4678c69c85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e2111cb3b07841995b0a0e4678c69c85_JaffaCakes118
Size
622KB
MD5
e2111cb3b07841995b0a0e4678c69c85
SHA1
7d9d4ab1b35208d076d7fe45405e6986178a287d
SHA256
b666325729d0aa8e49292441558e945d0075439d6e6a544181fe708864835383
SHA512
653f1a0052bfc026cfff35c3ac4475e1e5f6cb2a2355ceb45f507c66b5e2898002c1c7a9d3af88634eba261020628c82406d6f978600a063a710b7e80c77e856
SSDEEP
12288:PvAMQNWvUGUOpCuAgps2EtSmqOgPh/jT9kwYCjV6Tw6RZv6/bm6iWdt696w:cGzpX8tShPh/9kJ26vx6q3+e6w
Checks for missing Authenticode signature.
resource |
---|
e2111cb3b07841995b0a0e4678c69c85_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
FindResourceA
HeapAlloc
GetCurrentProcess
GetModuleHandleExW
GetTimeFormatA
GetTickCount
GetConsoleAliasesA
ActivateActCtx
GlobalAlloc
GetLocaleInfoW
SizeofResource
GetFileAttributesA
FindNextVolumeMountPointW
CreateJobObjectA
GetProcAddress
HeapSize
GetConsoleDisplayMode
FreeUserPhysicalPages
GetAtomNameA
SetConsoleCtrlHandler
GetModuleHandleA
LoadLibraryExA
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetStartupInfoW
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetLastError
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetFilePointer
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
CloseHandle
CreateFileA
Memory
Roses
Sos
Surrender
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ