Fqxmpqgylys
Elqhwdhqg
CloseHergwsycns
Vxdjsvoel
CreateTjfswhqfqdf
Swtujlfpby
Krlhjysy
Static task
static1
Behavioral task
behavioral1
Sample
2cd2bba63c6425d92734551961ab0086_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2cd2bba63c6425d92734551961ab0086_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2cd2bba63c6425d92734551961ab0086_JaffaCakes118
Size
1.0MB
MD5
2cd2bba63c6425d92734551961ab0086
SHA1
838fb58ee64f95894c95ab4dab6b4ebcde28b097
SHA256
7997f46db2602ac161e6e60d8715ca69ca583e980015dbab641f716b57f1e56d
SHA512
0e93dfedfb84d2100db0199b5539497e2ff56f5fc69585ca2c53bd4e6875ed7ac46b2434140b41a5fe8043efd5816f2df1e3162ccde90b9a6c0cd8598244a2dc
SSDEEP
24576:Mg/yP8z5BEW0xWTUKaeQvoxvWWRFsdaIKypr+Hqe6:nyPcB0ejxzKRge
Checks for missing Authenticode signature.
resource |
---|
2cd2bba63c6425d92734551961ab0086_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetLastError
VirtualAlloc
ExitThread
GetBinaryTypeA
FlushViewOfFile
GetProfileSectionW
GetProcessHandleCount
GetCommModemStatus
OpenThread
GetExpandedNameA
GetConsoleCursorMode
VirtualProtectEx
GetLocaleInfoA
ToAsciiEx
SetClipboardViewer
CloseWindow
SendNotifyMessageA
TabbedTextOutA
ChildWindowFromPointEx
DestroyCaret
GetParent
GetWindowPlacement
AnyPopup
EnumDisplaySettingsA
RtlGetLastWin32Error
Fqxmpqgylys
Elqhwdhqg
CloseHergwsycns
Vxdjsvoel
CreateTjfswhqfqdf
Swtujlfpby
Krlhjysy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ