Exec
ExecToLog
ExecToStack
Static task
static1
Behavioral task
behavioral1
Sample
0a0900faf01839823bf683214ce58b64_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a0900faf01839823bf683214ce58b64_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0a0900faf01839823bf683214ce58b64_JaffaCakes118
Size
32KB
MD5
0a0900faf01839823bf683214ce58b64
SHA1
073841312ca77749317163011d6922f8f58bb60c
SHA256
7bf18ab2190d04abce4f4a1e9c35f46602abe552ed40feabfab537d7db0ced14
SHA512
9976b33a7f6e487dd7763006e049a264ee486b9795a7e44ba417d7206675efbde7d896868f8402c0a95d6063c96dc4463d1e94ee88890f8f4439c3d83f1264f6
SSDEEP
768:+k0P/o7UStJkKXipa9c8RuaHJOQcCrRN8Prvy:+FP/o7USFXiOPpcCrX82
Checks for missing Authenticode signature.
resource |
---|
0a0900faf01839823bf683214ce58b64_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess
SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
Exec
ExecToLog
ExecToStack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ