InitSrcihomjbsl
CloseRqutctjqri
SetIxvrasswu
BeginXuwlmwaqlqj
Yucbytvbbyo
InitYkltwwxqpg
AddFqaojalkp
Static task
static1
Behavioral task
behavioral1
Sample
3ad8b9121674851ac2f6491bde139a50_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3ad8b9121674851ac2f6491bde139a50_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3ad8b9121674851ac2f6491bde139a50_JaffaCakes118
Size
145KB
MD5
3ad8b9121674851ac2f6491bde139a50
SHA1
99719041cada823c18c1f8a40f83a77ee6eba167
SHA256
b436c2efd1123f41a2d4829bf625d42a0216454adb5a6a382c01a8752e5248d2
SHA512
75845eb370434fc80cbb41fab651e4e06cd4fc41626ef32b640f2efb0b93217987597dd8e73cc0fb5c18697cdb150ba2b20a2079e18d39e16d4b0ad7c06c6394
SSDEEP
3072:S9QR8wp+2lWM6gq3qcZI/+kiSjVICo1NJPL00oswqKUP43ENdktFEP0EyhBe8E:0Syd3sGkinCozJIDi43+dkfhe
Checks for missing Authenticode signature.
resource |
---|
3ad8b9121674851ac2f6491bde139a50_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetProcessHeaps
GetConsoleMode
UpdateResourceA
ReleaseMutex
OpenWaitableTimerA
GetEnvironmentStringsA
VirtualFree
GetDiskFreeSpaceExA
GetThreadSelectorEntry
VirtualAlloc
EndUpdateResourceA
TerminateJobObject
SetThreadUILanguage
CallMsgFilter
SendNotifyMessageA
GetClassInfoExA
BroadcastSystemMessageExA
DispatchMessageA
SendNotifyMessageA
SetKeyboardState
CascadeWindows
RemovePropA
ClipCursor
MapVirtualKeyExA
InitSrcihomjbsl
CloseRqutctjqri
SetIxvrasswu
BeginXuwlmwaqlqj
Yucbytvbbyo
InitYkltwwxqpg
AddFqaojalkp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ