??4_Init_locks@std@@QAEAAV01@ABV01@@Z
LTGetILTMemory
SetMasterDatabase
fcEXP
Static task
static1
Behavioral task
behavioral1
Sample
0a5ddb0eb1ff5232d07a56c5afa1a3b1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0a5ddb0eb1ff5232d07a56c5afa1a3b1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0a5ddb0eb1ff5232d07a56c5afa1a3b1_JaffaCakes118
Size
1.6MB
MD5
0a5ddb0eb1ff5232d07a56c5afa1a3b1
SHA1
ecdc076e5ff22dfe1bec21706fa64873f2dd023b
SHA256
6b7f5ce35a8c58bb8394be5e92e3dfacedad8c72b17bc030b41f4688d8e8f33e
SHA512
a888587e85727e709f616a2391bfc6c00f9435fcef3fad027a64ca77b46927798143a76528c7623d4ba4c170ab46d712d7f02b3323f8ae9f368ed1097ce449db
SSDEEP
24576:Dsw+hoYQXqWv4VdTk5KHXtCB3wmsJ1jyLq0AKB6TOTVAj7hIBuYmqWG:4wFgWAVdTjHXtC3wmSqeiBAj7+B7m1G
Checks for missing Authenticode signature.
resource |
---|
0a5ddb0eb1ff5232d07a56c5afa1a3b1_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcpy
ExitProcess
DllGetClassObject
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
LTGetILTMemory
SetMasterDatabase
fcEXP
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE