@@Dfcontrol@Finalize
@@Dfcontrol@Initialize
@@Execryptor@Finalize
@@Execryptor@Initialize
@@Rypasswords@Finalize
@@Rypasswords@Initialize
__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
0211599c8f594ecccdd0eb813cf774cd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0211599c8f594ecccdd0eb813cf774cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0211599c8f594ecccdd0eb813cf774cd_JaffaCakes118
Size
464KB
MD5
0211599c8f594ecccdd0eb813cf774cd
SHA1
84cf3e934ef4a0cb094e0c9beda727f135105abd
SHA256
6a501799ddc6c83bfd7ee1ded8b632c9c3f9feb3b0fc1b80bcedf1d8b6a274c2
SHA512
f3858ef4778c9ff319b0589b82a145fcb02d6c51c407a818e9d996b7493a55704e502ea5bc7e909b23011fb4869bca69529c52a5d51c49a3715d748669ed70e0
SSDEEP
12288:cM5Nrt0CWrVEVcQZAaGwtk9URHPp5AUTf9LQxQthRTjtOgLYh:LjbWrkvZhHj5wC90x+NVUh
Checks for missing Authenticode signature.
resource |
---|
0211599c8f594ecccdd0eb813cf774cd_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
@@Dfcontrol@Finalize
@@Dfcontrol@Initialize
@@Execryptor@Finalize
@@Execryptor@Initialize
@@Rypasswords@Finalize
@@Rypasswords@Initialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ