Gkwaamw
Xvcrthxk
Static task
static1
Behavioral task
behavioral1
Sample
07a24a4688982a967eb1b256f4c9a019_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07a24a4688982a967eb1b256f4c9a019_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
07a24a4688982a967eb1b256f4c9a019_JaffaCakes118
Size
167KB
MD5
07a24a4688982a967eb1b256f4c9a019
SHA1
ae22728843fa5f4decf537350939d5351f02a2e3
SHA256
f5d552169316f7e6722e8596a3e5b3b28852afba6ca866dcedca8c3e1d056fe9
SHA512
928fb37d9e484c029ef6c23c36b5b253d234cc0ba5f29325c4b50b1953422d3ad2762056f042d91e1b6bb62c964ffafc915378510d17ae92a205ca0632b1a8f8
SSDEEP
3072:3PxsXpqfjImx3OKqAQV2v1V50hdeG8xGQ5Yh7issFAENGm0W3mqm:/xipCIG3OnAQjeG8bmRiRFAEEXH
Checks for missing Authenticode signature.
resource |
---|
07a24a4688982a967eb1b256f4c9a019_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetThreadContext
VirtualProtectEx
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext
PeekMessageA
SendDlgItemMessageA
GetParent
Gkwaamw
Xvcrthxk
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ