Awxeterlsgs
Qknquyq
Static task
static1
Behavioral task
behavioral1
Sample
f644073e344bb3ba47a2efa6063eca42_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f644073e344bb3ba47a2efa6063eca42_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f644073e344bb3ba47a2efa6063eca42_JaffaCakes118
Size
72KB
MD5
f644073e344bb3ba47a2efa6063eca42
SHA1
847882d321ac40ba24306f9b3cef24a3e5d03d40
SHA256
d9d3bf207ef65e9bb5aadab0259f4c7bd3616aab2f2fb316e4ad2100f73f194d
SHA512
df34c9e8e1fe74739cd6c2d379d8053c05d76451b1b87e32bc0d68daca7516d174365d7fcef740cd54231f42b84438fed8f2e9cceb5db31998cf0dbc065e7689
SSDEEP
1536:juvHUcBFLIVAk75gUuUEoUBnTp2wE8KK:6ccDLIavJp2wE4
Checks for missing Authenticode signature.
resource |
---|
f644073e344bb3ba47a2efa6063eca42_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetThreadContext
VirtualProtect
FreeLibrary
GetCommandLineA
GetLastError
ExitThread
GetStartupInfoA
PeekMessageW
PostThreadMessageA
Awxeterlsgs
Qknquyq
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ