RenameChange
?RenameCommand@@YGPAEPAXJ@Z
?RenameFortation@@YGPAEPAXJ@Z
?RenameHerbal@@YGPAEPAXJ@Z
?RenameLoadMac@@YGPAEPAXJ@Z
?RenameOptimize@@YGPAEPAXJ@Z
?RenameTest@@YGPAEPAXJ@Z
Static task
static1
Behavioral task
behavioral1
Sample
03d6411aeb14f553a7cc05eabebc37d3_JaffaCakes118.exe
Resource
win7-20240903-en
Target
03d6411aeb14f553a7cc05eabebc37d3_JaffaCakes118
Size
50KB
MD5
03d6411aeb14f553a7cc05eabebc37d3
SHA1
967a48633bf59bc89b7d526b652e25705f1a633f
SHA256
fc8f07a736210277e2b24484641b5b5b6931abbab7aa5753c937c0d40ce096df
SHA512
216f7dc70ae5c174818862bf45b00146839c14f29873f6275b752e6e337d30d2bbdbad1ff481ba1c4e4daa27b23df9e74a72c87b8e1efd7a589bb46203f05f5a
SSDEEP
1536:p+pt3zNfsAd7ZZXbStvQ2w/GsQe6SXMK7d:p+3jf7XKvlwusQ2Xjd
Checks for missing Authenticode signature.
resource |
---|
03d6411aeb14f553a7cc05eabebc37d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemWindowsDirectoryW
RenameChange
?RenameCommand@@YGPAEPAXJ@Z
?RenameFortation@@YGPAEPAXJ@Z
?RenameHerbal@@YGPAEPAXJ@Z
?RenameLoadMac@@YGPAEPAXJ@Z
?RenameOptimize@@YGPAEPAXJ@Z
?RenameTest@@YGPAEPAXJ@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ