@dfkvodv@0
@mctraxer@0
Static task
static1
Behavioral task
behavioral1
Sample
rudZqlH.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
rudZqlH.exe
Resource
win10v2004-20241007-en
Target
JaffaCakes118_42115345e6724d8aec1aad5d19ffd8a8aae03c504bee41334fccc3f168ac0662
Size
146KB
MD5
fdb06e9e6c295e910342f70afe720c74
SHA1
5f24316922e2d3e0a0e086ac16b6cafeb929cd56
SHA256
42115345e6724d8aec1aad5d19ffd8a8aae03c504bee41334fccc3f168ac0662
SHA512
8ca8817fb29126d83127a330ff9d03d1e782c93e4e9c0188965f8b0123e152d879324046fee35a7948415ac239d9fa2648c2d007bd30df8d02fe686b82dc455e
SSDEEP
3072:CP2VjEyYPuGEhfUpu9khPzC7nqLUjkRKmEVK+It8U8hfNbysVGJZ:22VjEZuGofUpuX7iUjIC48hUJZ
Checks for missing Authenticode signature.
resource |
---|
unpack002/rudZqlH.exe |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapReAlloc
SetConsoleTextAttribute
ConnectNamedPipe
GetPrivateProfileStringA
GetCommTimeouts
EnumDateFormatsExW
ClearCommError
GetSystemWindowsDirectoryA
LocalAlloc
GetFullPathNameW
GetWriteWatch
GetProcAddress
SetupComm
ReadConsoleA
lstrcpyA
GetThreadSelectorEntry
GetDefaultCommConfigA
GetEnvironmentVariableW
BuildCommDCBAndTimeoutsA
GetAtomNameW
ProcessIdToSessionId
FindNextVolumeW
GetLastError
lstrlenW
lstrlenA
GetVolumeNameForVolumeMountPointA
HeapAlloc
MapViewOfFile
LoadResource
LoadLibraryA
CompareStringW
CreateFileA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
SetStdHandle
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
EnumServicesStatusA
EqualSid
RegisterEventSourceW
IsValidAcl
CloseEventLog
TransparentBlt
@dfkvodv@0
@mctraxer@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ