?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
21629819020c9e1fa4b3fca34a0efa8b_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21629819020c9e1fa4b3fca34a0efa8b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
21629819020c9e1fa4b3fca34a0efa8b_JaffaCakes118
Size
45KB
MD5
21629819020c9e1fa4b3fca34a0efa8b
SHA1
cb227fa588b9400d50d10de7cd7a72450ad930f1
SHA256
19d69759855a23dfe921a76c32e25c82f9161a70874bef016c34710723a9c977
SHA512
1251c219207c43355977a4f5343348b7debcbd2332f99bfcbd57c8b9d1c3f278882d5b304508514ab8d3bd0451c6b0a608ae4db81410d2ff8b028da9d9f0fd20
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBk:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsk
Checks for missing Authenticode signature.
resource |
---|
21629819020c9e1fa4b3fca34a0efa8b_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ