Atoqhed
Earmdea
Uagdgfxnas
Static task
static1
Behavioral task
behavioral1
Sample
4598443f400e3e9f753ea15b003bf048_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4598443f400e3e9f753ea15b003bf048_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
4598443f400e3e9f753ea15b003bf048_JaffaCakes118
Size
134KB
MD5
4598443f400e3e9f753ea15b003bf048
SHA1
297e7388c6d93853d3ccf0d9a3eb33e884412a4e
SHA256
fe3d1d1c62bc5c3c1ea5de689a4e4818fb01f41720a8e5ac4e212de142b8cbb5
SHA512
61847b01ea7c06d6c73ba72d0efb64243cc4421b2203706d2f09c628c25735fa1e25bf2b24121b5d8726c4f1cd17027d647ef4db07e3eca6f136292c5334e09f
SSDEEP
1536:szJKc15vYh7GTuM/X18q/qlZV8fS+1j6NSZy8unfNbZL93ZKbvWTxZZWhRp:8YEesH/FDYZuS+t6Q8nzL+LWTxfa
Checks for missing Authenticode signature.
resource |
---|
4598443f400e3e9f753ea15b003bf048_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceTypesA
GetCommandLineA
GetModuleHandleA
GetConsoleOutputCP
GetVolumePathNamesForVolumeNameA
FindResourceExA
CreateFileA
WritePrivateProfileSectionA
GetMailslotInfo
GetSystemWindowsDirectoryA
GetPrivateProfileStructA
VirtualAlloc
TransmitCommChar
GetStartupInfoA
IsValidLanguageGroup
GetWindowsDirectoryA
GetThreadContext
GetConsoleOutputCP
GetCurrentProcessId
SetTimerQueueTimer
GetConsoleAliasExesLengthA
GetVolumeInformationA
PolyTextOutW
ChangeDisplaySettingsExA
OpenWindowStationA
AnyPopup
MenuItemFromPoint
GetKeyboardLayoutNameA
OpenDesktopA
GetProcessDefaultLayout
SendMessageCallbackA
CharUpperBuffA
RealGetWindowClassA
SetClassLongA
GetAncestor
UnregisterUserApiHook
LoadBitmapA
PrintWindow
GetWindowTextA
LoadMenuA
LoadMenuA
ReasonCodeNeedsBugID
SendMessageTimeoutW
QuerySendMessage
GetMenuState
GetCursorPos
EqualRect
SetPropA
Atoqhed
Earmdea
Uagdgfxnas
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ