LowcaseBinarY
?LostForwardTip@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?TemplateMessage@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
Static task
static1
Behavioral task
behavioral1
Sample
a2828e192b884c823fb6d1d1f433ff54_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
a2828e192b884c823fb6d1d1f433ff54_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
a2828e192b884c823fb6d1d1f433ff54_JaffaCakes118
Size
87KB
MD5
a2828e192b884c823fb6d1d1f433ff54
SHA1
8a719447e53750635c912a45f5f0ed867989e868
SHA256
78bbcf3da537fd943a0a7975f63a55042b6efa5a85e594e89aed7875fde50234
SHA512
6e73e8ef7936a78b6a6a3b46e9b531ae2fd4ca2ec0fbb76e80587b87ca7ab377c39a7c3c7ca2a4a9feaf06543117c0497db89074dcff499b64d45ba17e7afd4f
SSDEEP
1536:3OoV9TWHezE+hoY38zMPdJcPLfJK2UAUrsoKpwdrEliyTr45qcY3S5Xv8V1g4c6q:3OPezEoo2NPTcLJMAUrNKp6EDr459j5j
Checks for missing Authenticode signature.
resource |
---|
a2828e192b884c823fb6d1d1f433ff54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCSpnIW
GetSystemTime
IsCharUpperA
LowcaseBinarY
?LostForwardTip@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?TemplateMessage@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ