?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
0f6ab01de0fa80fe84a501d390180679_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f6ab01de0fa80fe84a501d390180679_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0f6ab01de0fa80fe84a501d390180679_JaffaCakes118
Size
95KB
MD5
0f6ab01de0fa80fe84a501d390180679
SHA1
9a00c32c1b371c694c903f7c81d817d10b0fe95e
SHA256
8099df22d6d09a8b631e3f3560994bc1dd5c935cc8318a2e9006f18ab164166a
SHA512
2a121f5a1b4724f348b9911d6ff866455349aab2eba1f23eb524b691fb180f4c3a7ab0c59c494c3016ba65a0d3ef1306f42ead7a90f190e644c0fa80f647c56e
SSDEEP
1536:2cZ3NkA4trT3tpEUiUQ0jOau7FQT4jdocemxSfVmUbHoIW7LkiA5M6:xWVtrT3ALG9u7u0po4xYmAHotLVA5
Checks for missing Authenticode signature.
resource |
---|
0f6ab01de0fa80fe84a501d390180679_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InternetOpenA
InternetOpenUrlA
CloseHandle
HeapAlloc
GetProcessHeap
GetCurrentProcess
HeapFree
WaitForSingleObject
OpenProcess
GlobalAlloc
LoadLibraryA
ReadProcessMemory
HeapDestroy
HeapCreate
ReadFile
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
CompareStringA
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ReleaseSemaphore
CreateSemaphoreA
TerminateThread
GetActiveWindow
DrawTextA
MoveWindow
ModifyMenuA
UpdateWindow
PostMessageA
ShowWindow
InvalidateRect
SetWindowLongA
GetMenu
GetForegroundWindow
SendMessageA
DrawIcon
GetWindowInfo
LoadIconA
GetWindowRect
ReleaseDC
FindWindowA
GetDC
BitBlt
LineTo
SelectObject
DeleteDC
CreateCompatibleDC
memset
?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ