_CryptPointer@8
_ProcessXML@4
_ResetCounter@8
Static task
static1
Behavioral task
behavioral1
Sample
063a7977e2197732270e34fd7b3e4ee8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
063a7977e2197732270e34fd7b3e4ee8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
063a7977e2197732270e34fd7b3e4ee8_JaffaCakes118
Size
92KB
MD5
063a7977e2197732270e34fd7b3e4ee8
SHA1
26cb9eb6f1b7555414d5eaf4e55014cd716d51d2
SHA256
5b4a60cc185323271a381504a7d16e1933fdb08e9f878a9acd4685e8c0f50e5b
SHA512
5201ece2bd1b0f152ba47aa08cba1ce269d3c6406209f6d380509cbe185ddfd8b2c9ba292f632bf4b0af2f5f093c326e29ea01865a66fc36783f8caf22dd556a
SSDEEP
1536:N7B3eFzUh5caV0upY2LtLNg5Eta5iIZ78gnAkMsdvJ0TVbvq8tn0c131H0:N7I1s5ftLtRgmsckMsdqjZ0I350
Checks for missing Authenticode signature.
resource |
---|
063a7977e2197732270e34fd7b3e4ee8_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ShellExecuteExA
DuplicateIcon
GdipAddPathStringI
GdipAddPathString
GdipNewPrivateFontCollection
GdipGetPathLastPoint
GdipAddPathLineI
GdipGetVisibleClipBoundsI
GdipCreateBitmapFromScan0
GdipAddPathPath
GdipIsOutlineVisiblePathPointI
GdipDeletePathIter
GdipCreatePathIter
GdipIsVisiblePointI
GdipNewInstalledFontCollection
ResetWriteWatch
CreateIoCompletionPort
GetSystemInfo
ReadFileEx
FindFirstFileExW
SetCommState
CopyFileW
GetStdHandle
FindFirstFileExA
SetStdHandle
SetCommMask
HeapReAlloc
HeapAlloc
GetCommandLineA
FatalAppExitW
GetModuleHandleA
CloseHandle
HeapFree
GetModuleHandleExW
GlobalLock
LocalFlags
GetEnvironmentStrings
LocalShrink
IsProcessorFeaturePresent
GetWriteWatch
IsDBCSLeadByte
GlobalUnlock
GetProcAddress
GetMessageA
ExitWindowsEx
PtInRect
RegisterHotKey
ExcludeUpdateRgn
UnregisterHotKey
ScrollWindowEx
DispatchMessageA
ShowScrollBar
EnableScrollBar
SendMessageCallbackW
BroadcastSystemMessageW
InvalidateRect
SetRect
TranslateMessage
GetScrollRange
LogonUserA
RegOpenKeyA
QueryServiceConfigA
RegOpenKeyExW
RegConnectRegistryW
AbortSystemShutdownA
GetTokenInformation
SetThreadToken
OpenServiceA
_CryptPointer@8
_ProcessXML@4
_ResetCounter@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ