?AJifoijfsc@@YAHHPADHH@Z
?AJifoijfsh@@YAHHPADHH@Z
?AJifoijfsi@@YAHHPADHH@Z
?AJifoijfsm@@YAHHPADHH@Z
?AJifoijfso@@YAHHPADHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
21b5faa460a535408f9030644050e2e2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21b5faa460a535408f9030644050e2e2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
21b5faa460a535408f9030644050e2e2_JaffaCakes118
Size
42KB
MD5
21b5faa460a535408f9030644050e2e2
SHA1
58da781275df12ac2675bca319174378e0f2cf70
SHA256
d49414683ed7ee7e27dafd6607436cae2888b17c911715ec4fab9ac8ece4d39e
SHA512
2b496cd4fe38abcc4e851faafc488e5d8adcc7846e04f91c8016a7eec37a78fa09fdfbe06dfe83e5522bdef92f423afc4f6aa01f478dfc37cf129df91a2e6238
SSDEEP
768:36Esy4oMuVJ9UFAp5v32pk9M7dZOJZBCN2T328Ro9H/auPl6eQPF0WABS:psH8OFA7K7dya2G4o9RP6PFbV
Checks for missing Authenticode signature.
resource |
---|
21b5faa460a535408f9030644050e2e2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCurrentThread
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
CreateThread
InterlockedIncrement
InterlockedExchangeAdd
InterlockedDecrement
InterlockedExchange
GetCurrentProcess
GetTickCount
GetProcAddress
GetMessageA
CreateWindowExA
RegisterClassExA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetCursor
GetActiveWindow
FindWindowA
GetBkColor
SetBitmapBits
GetObjectType
ResizePalette
CreateSolidBrush
SetGraphicsMode
?AJifoijfsc@@YAHHPADHH@Z
?AJifoijfsh@@YAHHPADHH@Z
?AJifoijfsi@@YAHHPADHH@Z
?AJifoijfsm@@YAHHPADHH@Z
?AJifoijfso@@YAHHPADHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ