?GetFJlksdjglkdfjhd@@YGPAXXZ
?GetGHsdjkglkdh@@YGPAXXZ
?GetKJGjhgfdhfdkh@@YGPAXXZ
?GetKJfkdsjgksjgd@@YGPAXXZ
?GetLKVGskgdh@@YGPAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
09b7ab73590638f0b01e3e8f42a8bbbd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
09b7ab73590638f0b01e3e8f42a8bbbd_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
09b7ab73590638f0b01e3e8f42a8bbbd_JaffaCakes118
Size
94KB
MD5
09b7ab73590638f0b01e3e8f42a8bbbd
SHA1
ccc6bc384a75cc50cd104d38fcdc140dd8060a74
SHA256
8260b92e6db559ce63058ba743f0ce4af3709021bd9ed4a306fa1cf5273dc1c0
SHA512
02a8e87f00ad3f475c3d719ad96b926e49c928ae8e48c25a4704f1907e05683bf83ab6d890a927a34ff2b7ebb9f996ef1004fb01e255c3024431812516e9abe1
SSDEEP
1536:CUU2jqM2IFaDiinQgcWqeJN+G1YOUgs77l+AHakl2HFBVaoml1HoqQ+Z9eJ:/jqMirQn0u77l+AHaNZqlmQZ9
Checks for missing Authenticode signature.
resource |
---|
09b7ab73590638f0b01e3e8f42a8bbbd_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_except_handler3
VirtualFree
TlsSetValue
GlobalAlloc
TerminateThread
HeapCreate
TerminateProcess
VirtualAlloc
GlobalFree
GetExitCodeThread
GetModuleHandleA
GetCurrentThreadId
CreateEventA
CloseHandle
TlsGetValue
HeapAlloc
GetCurrentThread
SetEvent
GetCurrentProcess
CreateWindowExA
PostMessageA
ModifyMenuA
SetScrollInfo
UpdateWindow
SetWindowTextA
GetActiveWindow
ShowWindow
LoadAcceleratorsA
TranslateAcceleratorA
GetScrollInfo
SetWindowLongA
GetMenu
TranslateMessage
GetWindowInfo
GetMessageA
GetWindowRect
GetDC
GetForegroundWindow
ReleaseDC
SetWindowPos
FindWindowA
SendMessageA
MoveWindow
InvalidateRect
LineTo
DeleteDC
SelectObject
CreateCompatibleDC
Polyline
CreatePen
TextOutA
MoveToEx
BitBlt
?GetFJlksdjglkdfjhd@@YGPAXXZ
?GetGHsdjkglkdh@@YGPAXXZ
?GetKJGjhgfdhfdkh@@YGPAXXZ
?GetKJfkdsjgksjgd@@YGPAXXZ
?GetLKVGskgdh@@YGPAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ