??0CTcpMib@@QAE@ABV0@@Z
??0CTcpMib@@QAE@XZ
??1CTcpMib@@UAE@XZ
??4CTcpMib@@QAEAAV0@ABV0@@Z
??_7CTcpMib@@6B@
Static task
static1
Behavioral task
behavioral1
Sample
b4ea1b50b549140502a4dfc4c7b5a5e8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b4ea1b50b549140502a4dfc4c7b5a5e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
b4ea1b50b549140502a4dfc4c7b5a5e8_JaffaCakes118
Size
12KB
MD5
b4ea1b50b549140502a4dfc4c7b5a5e8
SHA1
b942994229ee75fe64318eb52ab6dc38e2864ffb
SHA256
aec6381aafc301d18f5d355c9c3271400cf65f84e5b4b953a022092226706844
SHA512
1f3f924fb140fa3249f98d1a0063af46d89a3870ddfedda4b6eabc84059f40ecb246d1f74ecbe9f7f95c3a47b40cf1e4ce1d04569a4bc1d90a0ba8e709c97f0b
SSDEEP
384:4X7ts3c/3culaZTZRtXvVoIHlvFcYpLW+ohWs:4yyMu2ZRtXvVoIFvCPH
Checks for missing Authenticode signature.
resource |
---|
b4ea1b50b549140502a4dfc4c7b5a5e8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
exit
CoTaskMemFree
SysAllocString
RegisterEventSourceW
LoadStringW
??0CTcpMib@@QAE@ABV0@@Z
??0CTcpMib@@QAE@XZ
??1CTcpMib@@UAE@XZ
??4CTcpMib@@QAEAAV0@ABV0@@Z
??_7CTcpMib@@6B@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE