?TIKDNOMTB1@@YAHHH@Z
?TIKDNOMTC2@@YAHHH@Z
?TIKDNOMTE4@@YAHHH@Z
?TIKDNOMTF5@@YAHHH@Z
?TIKDNOMTJ9@@YAHHH@Z
?TIKDNOMTL11@@YAHHH@Z
?TIKDNOMTT19@@YAHHH@Z
?TIKDNOMTV21@@YAHHH@Z
?TIKDNOMTX23@@YAHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
177b6927640c27409663dd00b91642f7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
177b6927640c27409663dd00b91642f7_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
177b6927640c27409663dd00b91642f7_JaffaCakes118
Size
96KB
MD5
177b6927640c27409663dd00b91642f7
SHA1
d88e858909e4987d90a3c8a8c870df820663bac2
SHA256
d2e250bb42e5aa959da35e275b4f76626923cede8f00dc8284069fc2a7f005a7
SHA512
ffacc1d001c60f82a94d9b7829156ec528e3afdc0de4b4085faa6758bf57ccdcad24373ae347c4584672512bc156f4bbae6659f98d9b8090a75fdf978e450be9
SSDEEP
1536:YetSi1JuvADQEor17zfUr1I35XHQ7umo9X3mXOq2zrp9aQIq1TVBz8ySlQjhL4Vk:XkIuYDz2M6whQ3mXF2zrm5S/z8yQQ5iu
Checks for missing Authenticode signature.
resource |
---|
177b6927640c27409663dd00b91642f7_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WaitForSingleObject
HeapAlloc
GetProcessHeap
GetProcAddress
VirtualProtect
LoadLibraryA
HeapFree
GetForegroundWindow
GetActiveWindow
KillTimer
?TIKDNOMTB1@@YAHHH@Z
?TIKDNOMTC2@@YAHHH@Z
?TIKDNOMTE4@@YAHHH@Z
?TIKDNOMTF5@@YAHHH@Z
?TIKDNOMTJ9@@YAHHH@Z
?TIKDNOMTL11@@YAHHH@Z
?TIKDNOMTT19@@YAHHH@Z
?TIKDNOMTV21@@YAHHH@Z
?TIKDNOMTX23@@YAHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE