@MyFunc124@4
@MyFunc125@4
Static task
static1
Behavioral task
behavioral1
Sample
7f95279ad7bc6d152419ee75a9463153_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7f95279ad7bc6d152419ee75a9463153_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
7f95279ad7bc6d152419ee75a9463153_JaffaCakes118
Size
3.7MB
MD5
7f95279ad7bc6d152419ee75a9463153
SHA1
0d9e34e306ec34c3db2bef17f406375284c7b3ac
SHA256
47df16b4556f0531b5d658f498af86b7158441f5e9828a1b4896bbc8f0b1fbb9
SHA512
13c544f86aeb3e902797397d0ed1fe97594adb8e5ed64d9d8afb198d6aa3fa834530f44d0eb0b07683433756983c45d72dcf3d4158c07b97cd72c8edfb720a91
SSDEEP
98304:mvcmjiEBTryQlcrr5IUU4UZak+G3XgJeK1gmYj:mkqiEBTrc5Iz1/gJV
Checks for missing Authenticode signature.
Processes:
resource |
---|
7f95279ad7bc6d152419ee75a9463153_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
UnlockFile
GlobalAlloc
FreeEnvironmentStringsW
CreateEventW
InterlockedDecrement
GetOverlappedResult
GetProcessHeaps
lstrcpynW
GetLogicalDriveStringsA
SetProcessWorkingSetSize
GlobalFree
CreateActCtxA
GetStringTypeExW
IsValidCodePage
SetEvent
QueryDosDeviceW
GlobalUnWire
UpdateResourceA
FindFirstChangeNotificationW
GetCommandLineW
SetCommConfig
VirtualProtect
GetCommConfig
SetThreadPriority
lstrlenA
EnumDateFormatsExW
GetCPInfo
InitializeCriticalSection
SizeofResource
DeleteFileW
EnumDateFormatsA
lstrcmpiW
FreeConsole
SetDefaultCommConfigA
FlushFileBuffers
GetLocalTime
GetCurrentThread
AddConsoleAliasA
DnsHostnameToComputerNameA
GetProfileSectionA
ReplaceFileA
CreateMemoryResourceNotification
SetLastError
GetSystemWindowsDirectoryA
OpenJobObjectW
TerminateProcess
GetCurrentDirectoryA
WriteConsoleW
GetVersionExA
RtlUnwind
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
GetCursor
RegSaveKeyW
DestroyPrivateObjectSecurity
RegEnumKeyW
DeleteAce
ControlService
OpenServiceA
LookupAccountSidW
IsValidAcl
IsValidSecurityDescriptor
IsTokenRestricted
RegQueryInfoKeyW
GetSidIdentifierAuthority
SetServiceStatus
RegDeleteValueA
ClearEventLogA
AreAnyAccessesGranted
OpenProcessToken
AddAuditAccessAceEx
@MyFunc124@4
@MyFunc125@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ