@@Dfcontrol@Finalize
@@Dfcontrol@Initialize
@@Execryptor@Finalize
@@Execryptor@Initialize
@@Rypasswords@Finalize
@@Rypasswords@Initialize
__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
05f0ee50f9d521eb8a7570a0bb7e0c38_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05f0ee50f9d521eb8a7570a0bb7e0c38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
05f0ee50f9d521eb8a7570a0bb7e0c38_JaffaCakes118
Size
473KB
MD5
05f0ee50f9d521eb8a7570a0bb7e0c38
SHA1
1c71a326e98955f5c4611377750b6b2a2442b9b2
SHA256
4e35819d2c2d8236b883ca043ab3ea3255276b906dd1b79c848f863c0d4fb6d9
SHA512
8dfa4e7923bcc95762d612fa7b6820f50dde44cfb84b49e969a1df95754949e975960d8e791aa5ef81d9500c44f1ce4248e2ecaff99491481fc0ccd9b07b40ca
SSDEEP
12288:oitUO28IgnapDdMDC2NWRz1GPMfdzeL+NJfDGJrHa/oCaPGmTmCICSRV:DtGgaPt2URRUf+/buG/mTmCICq
Checks for missing Authenticode signature.
resource |
---|
05f0ee50f9d521eb8a7570a0bb7e0c38_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
MessageBoxA
@@Dfcontrol@Finalize
@@Dfcontrol@Initialize
@@Execryptor@Finalize
@@Execryptor@Initialize
@@Rypasswords@Finalize
@@Rypasswords@Initialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ