_fourthSoldier@4
_gekkon@4
_gifgeek@8
_thirdSoldier@8
Static task
static1
Behavioral task
behavioral1
Sample
f2ba69063b3000afa096f8ddd5ccb822_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f2ba69063b3000afa096f8ddd5ccb822_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f2ba69063b3000afa096f8ddd5ccb822_JaffaCakes118
Size
3.8MB
MD5
f2ba69063b3000afa096f8ddd5ccb822
SHA1
c286534d1c101d72fc78567061b0abf688140e7d
SHA256
f6ee3c70e54e3bb3a47a650895914d0d8b6bd52824c8aebb359a96e934d75250
SHA512
f3a2b133244c2a4e54e288d23419d8c89b5bbae09727e2a58702746baff29bdc457842b2150189d0dcb50ac87ed22b98bd86252c59a949882a32ae1ffcf3a1bc
SSDEEP
98304:zhM95DKGeMka0xoaaay8CPBbK6E6C27J0fJDPmlPdIa:zhMnOMdKTp2lK6Elml6
Checks for missing Authenticode signature.
resource |
---|
f2ba69063b3000afa096f8ddd5ccb822_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetPrivateProfileSectionNamesA
SetSystemPowerState
SleepEx
SetDefaultCommConfigW
SetStdHandle
InterlockedDecrement
GetSystemTimeAdjustment
FileTimeToDosDateTime
Sleep
CallNamedPipeA
SizeofResource
SetPriorityClass
_lcreat
IsDBCSLeadByte
WritePrivateProfileStructA
GetConsoleDisplayMode
ReadFileEx
ActivateActCtx
VerifyVersionInfoW
GetNamedPipeHandleStateA
FreeLibrary
LoadLibraryW
BuildCommDCBAndTimeoutsA
GetProcAddress
GlobalUnfix
GlobalAlloc
ExitProcess
SetFilePointerEx
CopyFileA
SetEnvironmentVariableA
GetCurrentDirectoryW
GetCommState
GetOEMCP
SetUnhandledExceptionFilter
FindAtomA
WaitForMultipleObjects
CreateSemaphoreW
SetFileApisToOEM
EnumResourceNamesA
ConnectNamedPipe
GetPrivateProfileStructA
SetLocalTime
SetLastError
GetModuleHandleW
SearchPathW
GetFileAttributesA
lstrlenW
IsBadWritePtr
lstrcpyA
LocalLock
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
HeapValidate
IsBadReadPtr
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
WriteFile
GetCPInfo
GetACP
IsValidCodePage
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateFileA
LoadLibraryA
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
IsTextUnicode
_fourthSoldier@4
_gekkon@4
_gifgeek@8
_thirdSoldier@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ