?GetFJlksdjglkdfjhd@@YGPAXXZ
?GetGHsdjkglkdh@@YGPAXXZ
?GetKJGjhgfdhfdkh@@YGPAXXZ
?GetKJfkdsjgksjgd@@YGPAXXZ
?GetLKVGskgdh@@YGPAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
0f737d670212e9f27a82f6c79ef0db89_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0f737d670212e9f27a82f6c79ef0db89_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
0f737d670212e9f27a82f6c79ef0db89_JaffaCakes118
Size
94KB
MD5
0f737d670212e9f27a82f6c79ef0db89
SHA1
ac36892e7ac98f842d6e1385b62a1a2dca05271b
SHA256
1f4b9c3b1a7cc46860ed7bbb5b49e6169e31e6ad648e77f6d2eeb101eebb5618
SHA512
da0e5e9d93897bdc1b0bfefda49a8d19b56fca382b4bfb3ea86c7be2140a3fa99ece6f3b45090ded7c995658e3999be6fa5095feaa4bbd9a2b77ab6d9f5e3cfd
SSDEEP
1536:oU0pAM2IFaZiin76WvWWGw7BBP8xVwK8/IDodauml1HoqQ+Z9eJRR:kAMUr760WWGw7H8x78SoqlmQZ9sR
Checks for missing Authenticode signature.
resource |
---|
0f737d670212e9f27a82f6c79ef0db89_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_except_handler3
VirtualFree
TlsSetValue
GlobalAlloc
TerminateThread
HeapCreate
TerminateProcess
VirtualAlloc
GlobalFree
GetExitCodeThread
GetModuleHandleA
GetCurrentThreadId
CreateEventA
CloseHandle
TlsGetValue
HeapAlloc
GetCurrentThread
SetEvent
GetCurrentProcess
CreateWindowExA
PostMessageA
ModifyMenuA
SetScrollInfo
UpdateWindow
SetWindowTextA
GetActiveWindow
ShowWindow
LoadAcceleratorsA
TranslateAcceleratorA
GetScrollInfo
SetWindowLongA
GetMenu
TranslateMessage
GetWindowInfo
GetMessageA
GetWindowRect
GetDC
GetForegroundWindow
ReleaseDC
SetWindowPos
FindWindowA
SendMessageA
MoveWindow
InvalidateRect
LineTo
DeleteDC
SelectObject
CreateCompatibleDC
Polyline
CreatePen
TextOutA
MoveToEx
BitBlt
?GetFJlksdjglkdfjhd@@YGPAXXZ
?GetGHsdjkglkdh@@YGPAXXZ
?GetKJGjhgfdhfdkh@@YGPAXXZ
?GetKJfkdsjgksjgd@@YGPAXXZ
?GetLKVGskgdh@@YGPAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ