__FineObjLib
__FineObjUsed
Behavioral task
behavioral1
Sample
239e13460175d130b21ecd05d9c28ba5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
239e13460175d130b21ecd05d9c28ba5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
239e13460175d130b21ecd05d9c28ba5_JaffaCakes118
Size
356KB
MD5
239e13460175d130b21ecd05d9c28ba5
SHA1
932fee56c00b0f5acd1859338fb6a1261993cda0
SHA256
1196bb61b2d1da28aa691db6144fdb93c2ab91e49256a3101d8c82aa6d6e7e63
SHA512
2b7e705956a2ce7387f1d9abd15dbcbdea0a198294ffd6577c8fe4cc4cd8de1b6289bf804bb76ba55d8c620251ef8501a7f495c781294fc705981cef63dfca8c
SSDEEP
6144:YI7qrXAF3kpthLahsuUe7iD+z5Tn3HCdZ+g59LfUTa52:d7iAF3kpte7w+tT3Scw9LsF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
239e13460175d130b21ecd05d9c28ba5_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WaitForSingleObject
GetCurrentThreadId
GetCommandLineA
CreateMutexA
GetLastError
GetModuleHandleA
GetTickCount
MulDiv
GetExitCodeThread
CloseHandle
TerminateThread
CreateThread
ExitThread
InterlockedIncrement
GetProcAddress
SetEnvironmentVariableA
GetLocaleInfoW
SetStdHandle
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalFree
FormatMessageA
CreateFileA
CreateFileW
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
FindFirstFileA
FindClose
FindFirstFileW
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileType
GetStdHandle
LoadLibraryExA
LoadLibraryExW
SearchPathW
SearchPathA
FreeLibrary
GetVersionExA
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
TlsFree
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsSetValue
TlsGetValue
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
GetModuleFileNameW
GetDriveTypeA
GetDriveTypeW
DeleteFileA
DeleteFileW
IsBadCodePtr
RtlUnwind
RaiseException
InterlockedDecrement
GetFullPathNameA
GetFullPathNameW
CreateDirectoryA
CreateDirectoryW
CompareStringW
CompareStringA
LoadLibraryA
FindNextFileA
FindNextFileW
SetLastError
GetACP
GetSystemDefaultLangID
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetVersion
ExitProcess
Sleep
IsBadReadPtr
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
LCMapStringW
GetEnvironmentStringsW
SetHandleCount
GetEnvironmentVariableA
GetCPInfo
GetOEMCP
LCMapStringA
IsValidCodePage
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsBadWritePtr
EnableWindow
SetTimer
GetMessageA
LoadStringA
MessageBoxW
IsWindowVisible
GetLastActivePopup
MessageBoxA
LoadStringW
wsprintfA
GetWindow
GetDesktopWindow
IsWindow
IsWindowEnabled
GetParent
GetWindowLongA
TranslateMessage
DispatchMessageA
KillTimer
RegisterClassA
CreateWindowExA
PostQuitMessage
DestroyWindow
DefWindowProcA
SendNotifyMessageA
PostThreadMessageA
RegisterWindowMessageA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegisterEventSourceA
DeregisterEventSource
ReportEventW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyA
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SysFreeString
__FineObjLib
__FineObjUsed
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE