?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
f0537d4bbd8e95bc957449e89b4b024d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f0537d4bbd8e95bc957449e89b4b024d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
f0537d4bbd8e95bc957449e89b4b024d_JaffaCakes118
Size
45KB
MD5
f0537d4bbd8e95bc957449e89b4b024d
SHA1
feeebc14b5308b7e8aca3406737697b78b47f988
SHA256
e3584ae1946514348402478037eb37015d961ca33bd5a087b39d9657d1fc0a38
SHA512
ed2b0d2c7c74839d6e82a2821fe651ae49947194ab20bfc37ac066e26c7079387892a6e9a4960fe565ca27da52eec3e3a4181843a45768b1f43545a7b32f4f0a
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBM:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsM
Checks for missing Authenticode signature.
resource |
---|
f0537d4bbd8e95bc957449e89b4b024d_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ