Jnawiolstw
AddDtnfwbaeuk
Dffkrjdv
Kgfaudu
CreateXbqtqum
IsIkpdjcdlc
Xxhbxellx
WriteQlxgtycjlm
Vvpwrrjof
OpenCtvaucokn
Static task
static1
Behavioral task
behavioral1
Sample
3c1d6ed8eceef1c6a8b90b76b21c1188_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c1d6ed8eceef1c6a8b90b76b21c1188_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3c1d6ed8eceef1c6a8b90b76b21c1188_JaffaCakes118
Size
146KB
MD5
3c1d6ed8eceef1c6a8b90b76b21c1188
SHA1
7ee5c6345ec9d71f3a3ef91e1480ee2fd3540665
SHA256
7739959eb415f7dda16b13b4b4bd743cafb672af183eb86bd897ce122628992f
SHA512
c04eecbbb49a411b68558acb4e990c882d5a9ada1ffd9d169a8cab0da80f1b5461bcf1964aaab64f564b3315c36e2243cb8c5630dab125fb500e2709c6fb25ff
SSDEEP
3072:LgFCc/IMs9jRFJxNPKELQiM61qz8xRFCLMczIDMtHvGq2b3Isr:ncp+djLKEk98U64LMggq
Checks for missing Authenticode signature.
resource |
---|
3c1d6ed8eceef1c6a8b90b76b21c1188_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetBinaryType
SetUserGeoID
GetCommandLineW
GetVolumePathNamesForVolumeNameA
GetLocalTime
ChangeTimerQueueTimer
OpenJobObjectA
ReadConsoleA
LockFile
GetDllDirectoryA
GetStartupInfoW
AllocConsole
UnlockFile
GetProcessIoCounters
GetVersion
GetModuleHandleW
GlobalFlags
FindVolumeClose
ExitProcess
WriteFile
HeapValidate
GetVolumePathNameA
OpenSemaphoreA
VirtualAlloc
MoveFileExW
GetConsoleMode
GetCommandLineA
PulseEvent
timeEndPeriod
timeBeginPeriod
CoTaskMemFree
CoGetMalloc
StringFromCLSID
ProgIDFromCLSID
RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcStringFreeA
Jnawiolstw
AddDtnfwbaeuk
Dffkrjdv
Kgfaudu
CreateXbqtqum
IsIkpdjcdlc
Xxhbxellx
WriteQlxgtycjlm
Vvpwrrjof
OpenCtvaucokn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ