@MyFunc124@4
@MyFunc125@4
Static task
static1
Behavioral task
behavioral1
Sample
a92d446b58a12cb5c6257ae498b61501_JaffaCakes118.exe
Resource
win7-20240611-en
Target
a92d446b58a12cb5c6257ae498b61501_JaffaCakes118
Size
227KB
MD5
a92d446b58a12cb5c6257ae498b61501
SHA1
a82ee3cf9f89a0737bc178b6fb84aff61a242f16
SHA256
53e42bba93deb78e0682c890062edd03b285f851fabad0928adba0cfa5fec2fa
SHA512
bda1fae5937d16ea7aadb8534d8020c2ef4163b7d1ffcdfcf61cad5ea08f2dfa4eb009030a691d690e26b81f5f18268a3c72f3b8b6eeb2ae2746504160ac2a64
SSDEEP
6144:+vULIQHWfC5rikqSr9Jr1Zl1qSI8SxU91Xh2OAZWO3:+c0QHWfSrFvtqdNe91X9sW6
Checks for missing Authenticode signature.
resource |
---|
a92d446b58a12cb5c6257ae498b61501_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetDefaultCommConfigA
FreeConsole
lstrcmpiA
EnumDateFormatsA
GlobalUnWire
LockFile
FileTimeToDosDateTime
GlobalAlloc
FreeEnvironmentStringsW
CreateEventW
InterlockedDecrement
GetOverlappedResult
ExpandEnvironmentStringsW
GetProcessHeap
VirtualQuery
lstrcpynW
GetLogicalDriveStringsA
SetProcessWorkingSetSize
GlobalFree
FlushFileBuffers
GetStringTypeExW
IsValidCodePage
SetEvent
FindFirstChangeNotificationW
GetCommandLineW
SetCommConfig
VirtualProtect
GetCommTimeouts
UpdateResourceW
_lwrite
SetThreadPriority
lstrlenA
InitializeCriticalSection
InterlockedCompareExchange
ReadFileScatter
SizeofResource
DeleteFileA
GetLocalTime
GetCurrentThread
AddConsoleAliasW
DnsHostnameToComputerNameA
GetProfileSectionW
ReplaceFileW
QueryMemoryResourceNotification
GetLastError
GetSystemWindowsDirectoryA
GetVersionExA
ChangeTimerQueueTimer
OpenJobObjectW
CreateActCtxW
ExitProcess
RtlUnwind
GetStartupInfoW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
Sleep
WriteFile
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
ReadFile
InitializeCriticalSectionAndSpinCount
HeapSize
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointer
SetStdHandle
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCaretPos
DeleteService
OpenServiceA
LookupAccountSidA
InitializeAcl
DuplicateTokenEx
RegQueryInfoKeyW
GetSidSubAuthority
SetServiceStatus
RegDeleteValueA
ClearEventLogA
AreAllAccessesGranted
OpenProcessToken
AddAuditAccessAceEx
@MyFunc124@4
@MyFunc125@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ