_DllMain@4
_ExeMain@8
_PopData@8
Static task
static1
Behavioral task
behavioral1
Sample
08ac6d233ba1ea5951c5e37f2c9136d5_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08ac6d233ba1ea5951c5e37f2c9136d5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
08ac6d233ba1ea5951c5e37f2c9136d5_JaffaCakes118
Size
92KB
MD5
08ac6d233ba1ea5951c5e37f2c9136d5
SHA1
c83d9141db0f529ffe77267d988898924c9769b8
SHA256
24cabd610791d5c3f8458193e46e3bede694b9b245c696377fb5e70ff254ea5e
SHA512
95853aebdfe329bdf70496d7669530374fa2db9d6a8f51d9678fea24f14977f1fdfd10fd068a726d427fd3b230418d5cb8a9e3b9e41eb490ebf6fcb2fabd3863
SSDEEP
1536:PT3Sx26nom6XChhGoeMll980KU1M7gXpi4qF8cFyi/0efCGCl1uL4Z0:PmAEom0MpB5MEo4qFA4CGC3uLk0
Checks for missing Authenticode signature.
resource |
---|
08ac6d233ba1ea5951c5e37f2c9136d5_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ShellExecuteExA
DuplicateIcon
GdipIsVisiblePointI
GdipNewInstalledFontCollection
GdipGetPathLastPoint
GdipNewPrivateFontCollection
GdipAddPathString
GdipAddPathStringI
GdipAddPathLineI
GdipGetVisibleClipBoundsI
GdipCreateBitmapFromScan0
GdipAddPathPath
GdipAddPathPie
GdipAddPathClosedCurve
GdipAddPathEllipse
GdipAddPathRectangle
ReadFileEx
IsProcessorFeaturePresent
GetProcAddress
ResetWriteWatch
CreateIoCompletionPort
GetCommModemStatus
UnlockFile
GetLogicalDrives
GetCommConfig
GetVolumeInformationA
GetFileAttributesW
CopyFileA
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FatalAppExitA
CloseHandle
HeapFree
GetModuleHandleExW
GlobalLock
LocalFlags
GetEnvironmentStrings
LocalShrink
GlobalUnlock
GetWriteWatch
IsDBCSLeadByte
GetSystemInfo
GetScrollRange
GetWindowRgnBox
GetMessageW
ScrollDC
InvalidateRect
SendMessageCallbackA
RegisterHotKey
GetScrollPos
UnregisterHotKey
BroadcastSystemMessageA
RedrawWindow
ScrollWindow
PeekMessageA
SetScrollPos
QueryServiceConfigA
SetThreadToken
GetTokenInformation
LogonUserA
RegOpenKeyA
OpenServiceA
RegOpenKeyExW
RegConnectRegistryW
AbortSystemShutdownA
memset
_DllMain@4
_ExeMain@8
_PopData@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ