FfdYpvvdxuJgkqeuxJfqxQx
DrrOzvb
StquAiehPztqgumUg
Static task
static1
Behavioral task
behavioral1
Sample
0adc244286a786b15c1d22c1f471a7d8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0adc244286a786b15c1d22c1f471a7d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0adc244286a786b15c1d22c1f471a7d8_JaffaCakes118
Size
142KB
MD5
0adc244286a786b15c1d22c1f471a7d8
SHA1
4d312f73314aef54d9798648eb84793421016787
SHA256
b1ff0786a42eb22444336eb96b2e5b5388be6f68d6567fbc735a85209e5f970d
SHA512
56c7cebf30cdd431dcd277896d38bab11d1a2635d2214434856b92a4a5388776ba58173bea5e30c9dcc603194db4949ad6dacac2ae06191ee3c0c0132b69151e
SSDEEP
3072:nd8tDuzGsptjF5JlNSplIYz5SGR2kIQ7g2i0lG/Gnc:nd8tuGctjFPlN6IxL2iCG/G
Checks for missing Authenticode signature.
resource |
---|
0adc244286a786b15c1d22c1f471a7d8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetCurrentDirectoryA
GetSystemWindowsDirectoryW
TerminateProcess
WritePrivateProfileSectionW
GetModuleHandleA
FormatMessageA
VirtualProtect
CreateMutexA
SetCurrentDirectoryW
VirtualAlloc
ReadFile
LoadLibraryW
VirtualFree
SetConsoleMode
LockResource
ExitThread
WritePrivateProfileSectionA
OutputDebugStringA
TlsGetValue
GetNumberFormatW
GetExitCodeProcess
SetFileTime
TlsAlloc
SetFilePointer
LeaveCriticalSection
GetStringTypeA
GetProcAddress
ResetEvent
memset
__winitenv
strerror
__set_app_type
IsWindow
wsprintfA
CallWindowProcW
LoadCursorW
DrawEdge
CreateWindowExA
CopyRect
GetForegroundWindow
DispatchMessageW
GetClipboardData
LineTo
GetRegionData
CreateSolidBrush
GetTextExtentPoint32W
GetTextMetricsW
CreateBitmap
SetStretchBltMode
DeleteDC
DeleteObject
StretchBlt
GetStockObject
SelectPalette
SetBkMode
CreateCompatibleBitmap
CreateRoundRectRgn
TextOutW
SetTextColor
BitBlt
ExtTextOutW
lineGetCallInfoA
lineAgentSpecific
lineMakeCallW
lineGetAddressCaps
tapiGetLocationInfoW
FfdYpvvdxuJgkqeuxJfqxQx
DrrOzvb
StquAiehPztqgumUg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ