GetCasual
?ZeroPointW@@YG_JU_tagSTACKFRAME64@@P6GPAXPAX_K@Z@Z
Static task
static1
Behavioral task
behavioral1
Sample
3a717789ad527f32dead0a945d77bc4e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a717789ad527f32dead0a945d77bc4e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3a717789ad527f32dead0a945d77bc4e_JaffaCakes118
Size
79KB
MD5
3a717789ad527f32dead0a945d77bc4e
SHA1
a7370b07c10b339e1a739bb7f6ac6d4036d23fea
SHA256
dc966bcc63f75d83942892bb3cf493e12e1faa6b216f9a01f308fea204178d6a
SHA512
38a2a66bb5386361c08bbfc2ad02f20770b43d3a97af41aac85eb6913b4f1092210b915943461ae3079e37f036bb6b93653695e8df9df6b8b56b29ca31b89738
SSDEEP
1536:npabJxxFh6/nDTJJNm4kjeq6ahNrnCPQBGGJp3p+Qhzu6GHY7w:Ufx76/DTJJ3kwa7VGGLp766GH5
Checks for missing Authenticode signature.
resource |
---|
3a717789ad527f32dead0a945d77bc4e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathRemoveArgsW
lstrlenW
GetCasual
?ZeroPointW@@YG_JU_tagSTACKFRAME64@@P6GPAXPAX_K@Z@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ