StartDownload
_WorkProc@4
__mp@4
Static task
static1
Behavioral task
behavioral1
Sample
1a1295b581a7e03a88c615e6fbc48a31_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a1295b581a7e03a88c615e6fbc48a31_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
1a1295b581a7e03a88c615e6fbc48a31_JaffaCakes118
Size
27KB
MD5
1a1295b581a7e03a88c615e6fbc48a31
SHA1
a66dfc9bfbc93c97dd0c6b59ab62e6be0688fab0
SHA256
b5394ff651204baf9f99406ff7a845a509e1475133f3f638b3179c63dff33410
SHA512
5031794fb508aec724e375c2d548fe3b7370f0b07e3ab1722c1b9be973d287af5952d9cadd7f10d66ae735748749187f9dc2f833b369694bf65298fe195ea5b2
SSDEEP
768:/n+j/6GeUlhkZTFGHqLEHwz0nkD3MZCNJi96ZB:w/6v1xLE86PCKsB
Checks for missing Authenticode signature.
resource |
---|
1a1295b581a7e03a88c615e6fbc48a31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WSAStartup
WSACleanup
ioctlsocket
gethostbyname
SHDeleteKeyA
lstrcmpiA
lstrcpyA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
HeapFree
lstrcatA
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
Sleep
PulseEvent
CreateThread
GetTickCount
GetCurrentThreadId
UnmapViewOfFile
WaitForSingleObject
GetLastError
CreateEventA
lstrcmpA
FreeLibrary
LoadLibraryA
lstrcpynA
CloseHandle
OpenEventA
MapViewOfFileEx
CreateFileMappingA
VirtualAlloc
VirtualFree
GetProcAddress
VirtualProtect
HeapReAlloc
OutputDebugStringA
FlushInstructionCache
WriteProcessMemory
VirtualProtectEx
GetThreadContext
ResumeThread
DuplicateHandle
CreateRemoteThread
OpenProcess
CreateProcessA
GetCurrentProcess
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualAllocEx
IsBadReadPtr
GetProcessHeap
VirtualQuery
OpenFile
SetFileTime
GetFileTime
CreateFileA
GetFileAttributesA
GetSystemDirectoryA
DeleteFileA
WinExec
GetWindowsDirectoryA
CopyFileA
MapViewOfFile
SetLastError
RemoveDirectoryA
ExitProcess
TerminateThread
GetCurrentThread
HeapAlloc
SetThreadContext
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegEnumValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
SHGetSpecialFolderPathA
ShellExecuteA
InternetOpenA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
InternetCanonicalizeUrlA
InternetCloseHandle
InternetCrackUrlA
InternetReadFile
InternetQueryDataAvailable
StartDownload
_WorkProc@4
__mp@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE