_Trooper@8
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_wsefwsrgwrg@4
Static task
static1
Behavioral task
behavioral1
Sample
e7cbe988f08525ac8a26d069fb005312_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e7cbe988f08525ac8a26d069fb005312_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e7cbe988f08525ac8a26d069fb005312_JaffaCakes118
Size
587KB
MD5
e7cbe988f08525ac8a26d069fb005312
SHA1
b6b614a65619cc28a23e34b7c03ba50391ba1825
SHA256
0134e10ddeca31d0d6fbb4c0a1e88bc2b0875b0e74dc5a6f7428799cb735c5d8
SHA512
3ca7bc297c3db818749466383ac8d28beaec7fd608d03b3bf4bc604a3ff59430ba4dcbc73e7906e334981d1587f9b0674a77617ae6172a6087fe30f4e5da4f92
SSDEEP
12288:stPrzngrgtj0IGo98mtSQIPVg3/QVWJPrvmxh1KcwbQOFT0/Cup:ggstj031lPy3IEJaxvKcwUF
Checks for missing Authenticode signature.
Processes:
resource |
---|
e7cbe988f08525ac8a26d069fb005312_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceNamesW
SetPriorityClass
WritePrivateProfileStructA
SetEndOfFile
BuildCommDCBAndTimeoutsA
FreeLibrary
ReadConsoleA
CreateJobObjectW
WaitForSingleObject
OpenSemaphoreA
ConnectNamedPipe
CallNamedPipeW
SetTapeParameters
LocalFlags
SetCommState
SetProcessPriorityBoost
ActivateActCtx
GlobalAlloc
LoadLibraryW
GetConsoleMode
TerminateThread
ReadFile
lstrcatA
GetBinaryTypeW
GetACP
lstrlenW
FindNextVolumeMountPointW
RaiseException
GetNamedPipeHandleStateW
InterlockedExchange
SetCurrentDirectoryA
GetStdHandle
IsDBCSLeadByteEx
GetCurrentDirectoryW
SetLastError
GetProcAddress
CopyFileA
GetConsoleDisplayMode
EnterCriticalSection
GetLocalTime
IsSystemResumeAutomatic
FindAtomA
GetPrivateProfileStructA
GetTapeParameters
SetEnvironmentVariableA
CreateMutexA
GetVersionExA
GetProfileSectionW
lstrcpyW
AreFileApisANSI
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
InterlockedCompareExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetLastError
MoveFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
GetCPInfo
HeapValidate
IsBadReadPtr
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
DebugBreak
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
GetModuleFileNameA
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetStringTypeA
FlushFileBuffers
GetConsoleCP
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
GetModuleHandleA
CloseHandle
CreateFileA
_Trooper@8
_asdga@4
_weewgg@8
_wsefwrgwrg@4
_wsefwsrgwrg@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ