LowerForY
?RevekFall@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?ServletKon@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
Static task
static1
Behavioral task
behavioral1
Sample
06639925a08406d4d94e27b4539187ec_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06639925a08406d4d94e27b4539187ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
06639925a08406d4d94e27b4539187ec_JaffaCakes118
Size
88KB
MD5
06639925a08406d4d94e27b4539187ec
SHA1
114ea1dfcb7bebb3c786df9869265206ca43c355
SHA256
de256a8476d6d64c140e2775730b1b03a843083721fd3ae139f30e201b4dff85
SHA512
f3afdbec7082a073caec1b7b0ec033d09f20e41f247c90c08ac05da5de1115660bba61216c641aab7fa3048facd6506fdc0c26f1f21c82d95f921c4198105a85
SSDEEP
1536:5t+5ZUHZI8PSFP6bD0QtsAuo2KOEgNsspiO6CkDYQUNoLV1h6bLO2:5CZF8YP6bDtsAMblsSiDBMQUNoZ1hWf
Checks for missing Authenticode signature.
resource |
---|
06639925a08406d4d94e27b4539187ec_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrPBrkW
GetTickCount
GetWindowDC
LowerForY
?RevekFall@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?ServletKon@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ