?zal2pha0@@YGXKPADK@Z
?zal2pha@@YGHPAXPADK@Z
?zalp2ha21@@YGXKPADK@Z
Static task
static1
Behavioral task
behavioral1
Sample
3d835f47b65ecc16107bac8d30937b65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3d835f47b65ecc16107bac8d30937b65_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3d835f47b65ecc16107bac8d30937b65_JaffaCakes118
Size
4.7MB
MD5
3d835f47b65ecc16107bac8d30937b65
SHA1
a663f0f0e866a1912403a2fcc1ff2df070329f8b
SHA256
33ea8ddf6c995554a2457a31ff2425471785e500fc1cd41fb0775cb751ba8aeb
SHA512
7c811df931c0837ecbef35bf4b6bb229b05a12e474172d1b4f37a7d1e4e743206c368dca59a89e5c8dddad657dd13ed317a76713879f8951c7e9e3ffa04c402d
SSDEEP
98304:FgGug3TNJDDxX1xtTle0zi9yM6BasP2fb2FPBIeK1bGSy374lS:F1TDlll3ziO92fKjEry3r
Checks for missing Authenticode signature.
resource |
---|
3d835f47b65ecc16107bac8d30937b65_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
WaitForSingleObjectEx
?zal2pha0@@YGXKPADK@Z
?zal2pha@@YGHPAXPADK@Z
?zalp2ha21@@YGXKPADK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE