WriteArnbunex
Kqmhltcc
Static task
static1
Behavioral task
behavioral1
Sample
3e92d05e3c51e3f7dd21c3c7274f54b6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e92d05e3c51e3f7dd21c3c7274f54b6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3e92d05e3c51e3f7dd21c3c7274f54b6_JaffaCakes118
Size
182KB
MD5
3e92d05e3c51e3f7dd21c3c7274f54b6
SHA1
53349dbf8735c020c133a0915bfb5daeaf1a0ee5
SHA256
7906ed053068dbe5c3f3f7ca843cbc1cd3fac9fb0ce632f77e46c13b9177d8f3
SHA512
43b6cd9dbd13725ea83c5d4ad98b501db5ae83256193b8282d63caec9ebd01b37681a7373176cea193ffe982199c618a7790a0579da8d6da22fe05426e5ec94d
SSDEEP
3072:4PWFlYjvw9sqGJBPMmZojKFpq618mVI2p2jzKOQwACBkrA7C:WSSw2JNMmZojKFL3/pVo7BkiC
Checks for missing Authenticode signature.
resource |
---|
3e92d05e3c51e3f7dd21c3c7274f54b6_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteArnbunex
Kqmhltcc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE