Gun
GunGunGun
Yeah
Static task
static1
Behavioral task
behavioral1
Sample
f364803b2fd9a9ab990d964230c9504f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f364803b2fd9a9ab990d964230c9504f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f364803b2fd9a9ab990d964230c9504f_JaffaCakes118
Size
3.9MB
MD5
f364803b2fd9a9ab990d964230c9504f
SHA1
e3a6c80eef7544fba9dd3dda3b5bd8eea3a6aa36
SHA256
0554773813b02bc36550506b8da24dab1fa0820b5945d52a950adcc2052f131c
SHA512
6ea0a73351a62e50bfe0d472ad2e81e1ef7964383d9892f2340acbef5abfa6f53f5e9f80cbb19fe4d9e57d74f3ce1ea30e7f9bf3e8273e637bce3f764a8ef8c1
SSDEEP
98304:q5P/cCYM5deIJLNZmzsKSmUhP35scO8nnBBq4:qZUY06NrKe35O8nnBw4
Checks for missing Authenticode signature.
resource |
---|
f364803b2fd9a9ab990d964230c9504f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
GetEnvironmentVariableW
FindResourceA
GetLocaleInfoA
MapUserPhysicalPages
LoadResource
HeapAlloc
SetConsoleTextAttribute
ZombifyActCtx
CreateJobObjectW
SetHandleInformation
GetTimeFormatA
GetTickCount
FindNextVolumeMountPointA
HeapValidate
lstrlenW
GetConsoleAliasesW
LocalAlloc
GetProfileStringA
VirtualProtect
GetCurrentProcessId
lstrcpyW
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
IsBadReadPtr
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetFilePointer
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
CloseHandle
CreateFileA
GetDesktopWindow
Gun
GunGunGun
Yeah
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ