RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
Static task
static1
Behavioral task
behavioral1
Sample
ab7757c7e52a44d863ed1eb6ff668df4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ab7757c7e52a44d863ed1eb6ff668df4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
ab7757c7e52a44d863ed1eb6ff668df4_JaffaCakes118
Size
92KB
MD5
ab7757c7e52a44d863ed1eb6ff668df4
SHA1
73ba9d9eae8ed68f6da5d78649420e16d0ddaeb8
SHA256
067c4e20d2a072a01e4e90239c1b6dd04525db2cfc2d71f08bcbd25132f61165
SHA512
25ff617bcff4b1c03d842a35525b374bb0f98b5ebdb79b74cbca4220d869c7475c45b09776909ae574b2230de73121ce5e23de0f5ed0b25ea4c417adc876ff97
SSDEEP
1536:t383ip+GqgeHQuvhEIuxTnTZZcM0ih40PcX+Fh+qs8YZioTdNKzARHk333P9s4+g:t383nwuOIuNnNZcM0j+w8hoqY691P
Checks for missing Authenticode signature.
resource |
---|
ab7757c7e52a44d863ed1eb6ff668df4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharUpperW
StrCmpLogicalW
GetConsoleCP
RoamingTraiI
?ImpactDS@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
?JoinLower@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@I
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ