RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
Static task
static1
Behavioral task
behavioral1
Sample
90112b9eb4daaa41e45ad0767a723ca7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
90112b9eb4daaa41e45ad0767a723ca7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
90112b9eb4daaa41e45ad0767a723ca7_JaffaCakes118
Size
93KB
MD5
90112b9eb4daaa41e45ad0767a723ca7
SHA1
78f384303d1da643d5c9e46293ba76b8095188dd
SHA256
d2a36596971fb36dc78be848a140eeb20e00c7210a61f2c318afd1cf913b55f2
SHA512
ed1aaee797cb82702045a3e4e47b88548286ac84e32604a7b0a6a0c09e044c7c1e182e1a9623ffffe22867bed734d9486c8ef5374c70a388a2a890a1e0114e70
SSDEEP
1536:fUyaa/xiDMMRBKxwHFZv6dViOIx63qvu7JoyYs0Tg3Nw6219oZcos333P1jN1UoG:f0a/xiDMxmlZv653qWVoPsig3Nw99oZv
Checks for missing Authenticode signature.
Processes:
resource |
---|
90112b9eb4daaa41e45ad0767a723ca7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharUpperW
GetConsoleCP
StrCmpLogicalW
RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ