getBuss
getCuss
getMuss
Static task
static1
Behavioral task
behavioral1
Sample
fb700f4249b7cd7b50136e072e184eab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb700f4249b7cd7b50136e072e184eab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fb700f4249b7cd7b50136e072e184eab_JaffaCakes118
Size
111KB
MD5
fb700f4249b7cd7b50136e072e184eab
SHA1
4a2db46ecc737b3a431446d04dfcdc2dc2fce691
SHA256
eab22bdcbd93dd52d8be80d6749baaf0366464f2333cd30ea9a5ffc2bf18e079
SHA512
d63590f5622ef2e6da46f50920173013d6a0bb3ba84c78443dc4f0836146fa12ee27aa9279e499ef99d969109003d960d0a408043f761fdfeadce6facb6dc78d
SSDEEP
3072:Wyg7tx3IljqOXqBU2VT9sB5rYPExj3jMMvAAJ3E/Re:WygxSzXqeuT9axo+LjMqB
Checks for missing Authenticode signature.
resource |
---|
fb700f4249b7cd7b50136e072e184eab_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleW
VirtualAlloc
GetProcAddress
EnumProcesses
getBuss
getCuss
getMuss
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE