FzuzebiOg
Akrepd
DrwWosmu
Static task
static1
Behavioral task
behavioral1
Sample
1adeeed1ae74799574b2070b9e5f8c5c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1adeeed1ae74799574b2070b9e5f8c5c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
1adeeed1ae74799574b2070b9e5f8c5c_JaffaCakes118
Size
122KB
MD5
1adeeed1ae74799574b2070b9e5f8c5c
SHA1
a436dfec5563b3a4e5b0c57106e670acfa3735a5
SHA256
182a164c4fb3a85d7d2b0ec591b38d07993c6d7d3649bb0ba0a6f3d98ae04fda
SHA512
8f5873f9733fba6d656cd8aac14d01152c7cf3f3f19e010e6bab429dd9c3df1ed850e741f89858195d2a0ecbe080b8cad28d1794270370be36ca6287158695f7
SSDEEP
3072:Ri+9DxfeWRyfWcIUNJLZg90QfxO/wF7TXxOyd0/NXV5tO1c:Q8xGWRyfLIyJ1IpO8TXx5dKv3q
Checks for missing Authenticode signature.
resource |
---|
1adeeed1ae74799574b2070b9e5f8c5c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileType
LoadLibraryW
SetEndOfFile
GetEnvironmentStringsW
GetTempFileNameW
GetLastError
VirtualAlloc
HeapDestroy
LocalFileTimeToFileTime
GetModuleHandleA
lstrcpyW
FlushFileBuffers
VirtualFree
GlobalAlloc
GlobalReAlloc
VirtualAlloc
GetProcAddress
CloseHandle
GlobalUnlock
VirtualProtect
ExitProcess
UnhandledExceptionFilter
GetCommandLineW
__getmainargs
wcstol
memset
exit
_wcsnicmp
towupper
wcstok
__CxxFrameHandler
_onexit
wcsstr
__setusermatherr
_CxxThrowException
strcpy
fclose
memcpy
__dllonexit
wcschr
_except_handler3
_c_exit
toupper
_wtol
__winitenv
_wtoi
realloc
atoi
_wcsicmp
_vsnprintf
wcsncpy
strchr
DialogBoxParamA
SetForegroundWindow
MessageBoxW
GetWindowTextLengthW
RegisterClassA
TranslateMessage
LoadStringW
GetFocus
SetWindowLongW
IsWindow
SetTimer
PostMessageA
KillTimer
GetDlgItemInt
GetParent
RegisterClipboardFormatW
SelectObject
SetTextColor
CreateSolidBrush
CreateCompatibleDC
TranslateCharsetInfo
SetStretchBltMode
StretchBlt
CreateBitmap
CreateCompatibleBitmap
PatBlt
SetBkMode
CreateFontIndirectA
GetStockObject
RestoreDC
glTexCoord1sv
FzuzebiOg
Akrepd
DrwWosmu
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ