?unzip@@YAPAXPADPAK@Z
InstallHook
_WorkProc@4
__mp@4
Static task
static1
Behavioral task
behavioral1
Sample
0a2e3b6b462f425a0ddf25e7a5c430ef_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a2e3b6b462f425a0ddf25e7a5c430ef_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
0a2e3b6b462f425a0ddf25e7a5c430ef_JaffaCakes118
Size
72KB
MD5
0a2e3b6b462f425a0ddf25e7a5c430ef
SHA1
0beeb20a6b8b73150764f3f5731478515630c521
SHA256
310475e8996f30ae234f8cdfe94e1802aa61f5a9e73693d75edc6a92ddb213ac
SHA512
ca78b757d10da92adc4bf889866413e181d0063fd2f93888abea21012952328dd0bbc78b95facfa7bf16b71ec452d6d50ebddf6501725f3da1b88b235d857c73
SSDEEP
1536:rLeSdy3FIieH626dF5OeikrStI9JeDDCwcGtc4h13Ut2L0cg8hmyY:rLH626hOeZr0I9JeSauty0/8hpY
Checks for missing Authenticode signature.
resource |
---|
0a2e3b6b462f425a0ddf25e7a5c430ef_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
EnterCriticalSection
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
FlushInstructionCache
SetLastError
lstrcmpA
FreeLibrary
IsBadReadPtr
GetVersionExA
GetSystemDirectoryA
ExitProcess
WaitForSingleObjectEx
SetEvent
OpenEventA
InterlockedIncrement
WaitForSingleObject
ExitThread
Sleep
DeleteFileA
UnmapViewOfFile
lstrcatA
OutputDebugStringA
GetTickCount
WriteProcessMemory
VirtualFree
VirtualAlloc
MapViewOfFileEx
CreateFileMappingA
SetThreadContext
VirtualProtectEx
GetThreadContext
CreateRemoteThread
ResumeThread
DuplicateHandle
OpenProcess
LeaveCriticalSection
FindNextFileA
FindFirstFileA
GetExitCodeThread
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualAllocEx
VirtualFreeEx
QueryDosDeviceA
GetLogicalDriveStringsA
CreateThread
GetWindowsDirectoryA
CopyFileA
GetFileAttributesA
CreateEventA
CreateFileA
MapViewOfFile
SetFileTime
GetFileTime
RemoveDirectoryA
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
OpenFile
GlobalAlloc
GlobalFree
GetCurrentProcess
InitializeCriticalSection
lstrcpynA
lstrcmpiA
HeapFree
GetProcessHeap
HeapAlloc
lstrlenA
HeapReAlloc
GetLastError
lstrcpyA
VirtualQuery
VirtualProtect
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
CreateProcessA
LoadLibraryA
wvsprintfA
MessageBoxA
wsprintfA
InitializeSecurityDescriptor
AdjustTokenPrivileges
RegQueryValueExA
OpenProcessToken
GetTokenInformation
RegEnumValueA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
SetSecurityDescriptorDacl
VariantInit
SysAllocString
SysFreeString
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCanonicalizeUrlA
InternetOpenA
InternetSetOptionA
InternetQueryDataAvailable
InternetCrackUrlA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
InternetQueryOptionA
HttpAddRequestHeadersA
RpcStringFreeA
UuidCreate
UuidToStringA
WSAGetLastError
select
inet_ntoa
accept
listen
closesocket
bind
setsockopt
htonl
htons
socket
getpeername
WSAStartup
WSACleanup
inet_addr
gethostbyname
recv
send
connect
shutdown
ioctlsocket
ntohl
ObtainUserAgentString
?unzip@@YAPAXPADPAK@Z
InstallHook
_WorkProc@4
__mp@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ