RenameChange
?RenameCommand@@YGPAEPAXJ@Z
?RenameFortation@@YGPAEPAXJ@Z
?RenameHerbal@@YGPAEPAXJ@Z
?RenameLoadMac@@YGPAEPAXJ@Z
?RenameOptimize@@YGPAEPAXJ@Z
?RenameTest@@YGPAEPAXJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
0373ee4a240448a87a6a318eb106d1ec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0373ee4a240448a87a6a318eb106d1ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0373ee4a240448a87a6a318eb106d1ec_JaffaCakes118
Size
186KB
MD5
0373ee4a240448a87a6a318eb106d1ec
SHA1
e08d93362973f59f4b305d6f0563d8b2a2003bc0
SHA256
612543601a4867be51d8b9eaf1017b2ceed064b960452a269cf0937d3c3a7e5d
SHA512
c688b44de4a0b800eef732917af78a80a1bbd71920b30730dae1e2885102de6c00c1e5c985b2ae54fabfc9742ecd202b904e7e299bdf0b3f39db363a9c1c7019
SSDEEP
3072:bUN7XKvlwuupdhCDkeKn7KhcjVVAfs6GHpKg2Lmhb1qaD35aM5CnvTUDxH3dJN76:Qp2wP7qkZKhoZ7ZqO5IvIDlNVkVtLHuc
Checks for missing Authenticode signature.
resource |
---|
0373ee4a240448a87a6a318eb106d1ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemWindowsDirectoryW
RenameChange
?RenameCommand@@YGPAEPAXJ@Z
?RenameFortation@@YGPAEPAXJ@Z
?RenameHerbal@@YGPAEPAXJ@Z
?RenameLoadMac@@YGPAEPAXJ@Z
?RenameOptimize@@YGPAEPAXJ@Z
?RenameTest@@YGPAEPAXJ@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ