LowcaseBinarY
?LostForwardTip@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?TemplateMessage@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_03cc24d952c1970a78cf13cf9c52ce16.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_03cc24d952c1970a78cf13cf9c52ce16.exe
Resource
win10v2004-20241007-en
Target
JaffaCakes118_03cc24d952c1970a78cf13cf9c52ce16
Size
86KB
MD5
03cc24d952c1970a78cf13cf9c52ce16
SHA1
2608a8292c49aeff89cfc1f6f3edf8c3b812b5be
SHA256
4a001cea5ef27d9794b75b52fe356cda2207b83c4653d465f3760317fee1784a
SHA512
3221f628a1c29c00f72430872a4a66c435c74d5f627052bc2dc982a36ea32ca191a105e96f03563ce80b22f13cdc35120ab4c733adab38a83e459bab81d481d9
SSDEEP
1536:eHHcQmCpgMFqg7NrR/U22I6Yh/NtL5+nBZbsaQq4NLtEn8ljT:encrcqgBR/r/Np5EBZbMZ9tEncj
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_03cc24d952c1970a78cf13cf9c52ce16 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrCSpnIW
GetSystemTime
IsCharUpperA
LowcaseBinarY
?LostForwardTip@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
?TemplateMessage@@YG_JU_HALIGNLEFT@@U_REMOTECONTROL_SYS@@@Y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ