Gun
GunGunGun
Yeah
Static task
static1
Behavioral task
behavioral1
Sample
f67315fe9cf8aa8a7f00f0a7b2792da1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f67315fe9cf8aa8a7f00f0a7b2792da1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f67315fe9cf8aa8a7f00f0a7b2792da1_JaffaCakes118
Size
249KB
MD5
f67315fe9cf8aa8a7f00f0a7b2792da1
SHA1
30eeed3076ac8a2800c2713b0fb1beaf06a2472b
SHA256
a60a583165e55f8a569cf4942d7bfb9622ab349aa34aec48705f72cbf3b2e45f
SHA512
747d3f6a031fc60a88d3bc84c1d91f0d43a606edf1bcc1d5bb1bca087c954fe8d9c8380bf36d835f07043a5afeabd41e4ec389992e99c3fbaafbb609779f7426
SSDEEP
6144:nrP8K2a8AqYrTHg7sVWDFzTAQ/XAcJ1Yuy7:B2NXY/Hg7sVGTIEHy
Checks for missing Authenticode signature.
resource |
---|
f67315fe9cf8aa8a7f00f0a7b2792da1_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExitProcess
HeapReAlloc
GetLocaleInfoA
FindResourceW
MapUserPhysicalPages
LoadResource
SetConsoleTextAttribute
ZombifyActCtx
CreateJobObjectW
GetTimeFormatA
GetTickCount
FindNextVolumeMountPointA
HeapValidate
lstrlenW
GetConsoleAliasesW
LocalAlloc
VirtualProtect
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
IsBadReadPtr
RaiseException
RtlUnwind
GetProcAddress
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetLastError
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapSize
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetFilePointer
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
CloseHandle
CreateFileA
GetDesktopWindow
Gun
GunGunGun
Yeah
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ