IsFnblkosreyo
Sdchtioeay
CloseYrrnspu
Kbdenjwhjs
IsRnlywtpkg
Nudrnrnffxm
Vqgauelrec
Vxsmsjwoib
Pbqeowfcejw
BeginNekiacyuf
BeginDlbijebm
Nhninvofk
Hdjrcajmma
BeginRfqprhk
IsPgruwti
Ocjxjpvkv
Ongaaep
SetAipvlde
Qlfppeqewl
EndTjnsvuhtna
Static task
static1
Behavioral task
behavioral1
Sample
2e6da59802150519d9e4d597325ce8b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e6da59802150519d9e4d597325ce8b0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2e6da59802150519d9e4d597325ce8b0_JaffaCakes118
Size
668KB
MD5
2e6da59802150519d9e4d597325ce8b0
SHA1
58fa688cefeb04366c14817f8946bef471e52972
SHA256
11d18ca026e32db619e4ba37b0f48bf608f77b60c011d567aee543dde1ce1a9a
SHA512
316aa24e2ae66e82561d50601f6f8e14884c7d37ac3f62bce6b51a090d8aee2300ea085671623212a4d1e0e932dbe60670e93dc15f1e09324389386d1aea2052
SSDEEP
12288:woZBc8nFH1mVTuGNMWH2KrbpGDEW7pHtcOtSQqidr+3u6AycizN/ZnYfTl2sBo:woRFHoJpbQDEWdlJjp+3u7y9/hyTllo
Checks for missing Authenticode signature.
resource |
---|
2e6da59802150519d9e4d597325ce8b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualProtect
SetComputerNameExA
ReadConsoleInputA
VirtualAlloc
OpenFileMappingA
ExitThread
ExitProcess
GetPrivateProfileSectionNamesA
SendNotifyMessageA
DlgDirSelectComboBoxExA
CallMsgFilter
SendNotifyMessageW
CheckMenuItem
IsFnblkosreyo
Sdchtioeay
CloseYrrnspu
Kbdenjwhjs
IsRnlywtpkg
Nudrnrnffxm
Vqgauelrec
Vxsmsjwoib
Pbqeowfcejw
BeginNekiacyuf
BeginDlbijebm
Nhninvofk
Hdjrcajmma
BeginRfqprhk
IsPgruwti
Ocjxjpvkv
Ongaaep
SetAipvlde
Qlfppeqewl
EndTjnsvuhtna
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE