_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
SABLE.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SABLE.exe
Resource
win10v2004-20240226-en
Target
eb1edc92536da30e14f7bd81a0308b4d_JaffaCakes118
Size
466KB
MD5
eb1edc92536da30e14f7bd81a0308b4d
SHA1
43193cd2e8d4f308dd2d14f6a2a8432363df3a31
SHA256
e2cdfc2d2a7e265202140a328f30ad44633d4b9653a8d8d92db7249ae31d5677
SHA512
d36fb18e8bb058f78532021568e7cee9d4f2c616a0249ceb21915d1a9f3fbabada56ab6c33fa3665f8ec41b20a7e2c9d71ae58d995943e3c4fb3fb9226216106
SSDEEP
12288:oZqxxb9VDWFhMvspHVjPYBAnG7FFLhbRf:w8m0s7g6nGR9hJ
Checks for missing Authenticode signature.
resource |
---|
unpack001/SABLE.EXE |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
GetCommandLineA
SetErrorMode
GetModuleHandleA
MulDiv
GetTempFileNameA
GetModuleFileNameA
lstrlenA
_lclose
lstrcpyA
FormatMessageA
lstrcatA
GetLastError
_lwrite
_llseek
GlobalUnlock
GlobalFree
GlobalAlloc
_lopen
GetProcAddress
_lcreat
LoadLibraryA
GetVersionExA
FreeLibrary
OpenFile
ExitProcess
GetCurrentProcess
WinExec
GetTempPathA
_lread
LocalFree
GetWindowsDirectoryA
GlobalLock
GetDC
DrawTextA
EndPaint
InvalidateRect
PostQuitMessage
SendMessageA
DefWindowProcA
GetClientRect
CreateWindowExA
BeginPaint
ReleaseDC
SetWindowPos
ShowWindow
UpdateWindow
SetTimer
LoadIconA
RegisterClassA
MessageBoxA
ExitWindowsEx
LoadCursorA
DeleteObject
PatBlt
CreateSolidBrush
GetDeviceCaps
SetTextColor
SetBkMode
TextOutA
StretchDIBits
CreateFontA
SelectObject
SelectPalette
CreatePalette
RealizePalette
GetStockObject
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ