Dutunrwqx
GetIifljpyg
EndYmpddbia
EndVoenpttu
GetStylpgywb
Bdsicequ
OpenJnllocsgo
Xvcrecjy
CloseMdcxlxi
IsBfjxbavh
Dqmdrdl
Vyqjnqh
OpenUfkofaaykrh
WriteYfgwsrbxyx
Fghfweohvd
EndPwsujwd
InitAkxqbpiksh
Otkgclwps
AddGarjskyifwk
ClosePfcdupxq
Static task
static1
Behavioral task
behavioral1
Sample
f62fd64609b0191154e45a4cdb8b2b73_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f62fd64609b0191154e45a4cdb8b2b73_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f62fd64609b0191154e45a4cdb8b2b73_JaffaCakes118
Size
4.0MB
MD5
f62fd64609b0191154e45a4cdb8b2b73
SHA1
3d44f170d86f8cbd40417071c8a3c86bf17587b8
SHA256
d9c3cf09e9b66e0b0a008479d49691abea7f4bb0d16d1ca2522d383b7acb6c3d
SHA512
f340dc10a398abd5d3e6b698c9c9d08d720109bc202828792fa5f49ea633c8096270e5c8e0007b211823866993983cc04ce20bb5a7932764f6a37d11c5b93038
SSDEEP
98304:O45GQSSCGC+NPsYVR0v2Aws1Fh9H2kQi7R5gbtRD6Lk/u:OL4lVsYVWvF2DqPIRAkG
Checks for missing Authenticode signature.
resource |
---|
f62fd64609b0191154e45a4cdb8b2b73_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
QueryInformationJobObject
GetFullPathNameA
IsSystemResumeAutomatic
SetVolumeMountPointA
GetSystemDefaultLCID
GetCommState
GetLastError
GetExitCodeThread
GetUserGeoID
GetCompressedFileSizeA
LoadLibraryExA
VirtualAlloc
SetConsoleCursorInfo
ReleaseSemaphore
GetWindowsDirectoryA
EndTask
SetCaretPos
GetParent
LoadAcceleratorsA
GetUserObjectInformationA
InSendMessage
GetDlgItem
GetDlgItemInt
CliImmSetHotKey
EnumWindowStationsA
PostThreadMessageA
ToAsciiEx
PostThreadMessageW
UnregisterDeviceNotification
InSendMessage
Dutunrwqx
GetIifljpyg
EndYmpddbia
EndVoenpttu
GetStylpgywb
Bdsicequ
OpenJnllocsgo
Xvcrecjy
CloseMdcxlxi
IsBfjxbavh
Dqmdrdl
Vyqjnqh
OpenUfkofaaykrh
WriteYfgwsrbxyx
Fghfweohvd
EndPwsujwd
InitAkxqbpiksh
Otkgclwps
AddGarjskyifwk
ClosePfcdupxq
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ