?BlockCompare@@YGXUKonstep99@RSV
?StingBlock@@YGXUKonstep99@RSV
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4c6e47d894f898d67a6420092e8d7fc0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_4c6e47d894f898d67a6420092e8d7fc0.exe
Resource
win10v2004-20241007-en
Target
JaffaCakes118_4c6e47d894f898d67a6420092e8d7fc0
Size
100KB
MD5
4c6e47d894f898d67a6420092e8d7fc0
SHA1
aade6a01beda2700209da14bb279144666565f70
SHA256
79d145976c2749d457e1e0c260010c7a88176fd5d83d85bb45d5c671d9e565fe
SHA512
b3fcb2345c8cc6d2a9d309921682a229ced33861d9cb591ab89a29b1b69b43c845d52b893ccdb30a114ab76f01f4bfc2af24e9c8f4ee23982a965f9d2d0855f7
SSDEEP
1536:S9RWycqOQ5DLSPxVEMsv+p6RVkkXGDbxvJNon24pNfbfUSF9/X:qRWxCu+MIhBXG/Zi24pNDB
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_4c6e47d894f898d67a6420092e8d7fc0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsCharAlphaNumericW
GetKeyState
IsCharLowerA
VkKeyScanA
GetNextDlgGroupItem
lstrlenW
UrlGetPartW
StrCSpnA
StrStrA
_wtoi
isupper
?BlockCompare@@YGXUKonstep99@RSV
?StingBlock@@YGXUKonstep99@RSV
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ