_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
netmamaSETUP.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
netmamaSETUP.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240508-en
Target
223274836dfb2641a130208142be400e_JaffaCakes118
Size
8.3MB
MD5
223274836dfb2641a130208142be400e
SHA1
636b3c94413cbcc3a04a4febf6b20a5ac1ad755c
SHA256
6845630c3947356ff2cf585f089c926d9721e192db9ca5f7b2d6f5bfc7674f2f
SHA512
01fec02f43f45917d7f514e5ae35b01338db23ad13dbf7732421cf4bf8c76245b39093034f4b9cc81aa04b2b67c425c6e3e016a3374f1ab4125c32232af0a678
SSDEEP
196608:fn7963S7Sr3pylryCIMH/Aer8OyOy3XVD5RpGl1Mc3nzTe:Tg3SeIlPlfNr1yO0XdpGl1k
Checks for missing Authenticode signature.
resource |
---|
unpack001/netmamaSETUP.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
lstrcpyA
GetCommandLineA
SetErrorMode
lstrlenA
MulDiv
GetTempFileNameA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
FormatMessageA
lstrcatA
GetLastError
_lwrite
_llseek
GlobalUnlock
_lopen
GlobalAlloc
GlobalFree
_lclose
_lcreat
LoadLibraryA
GetProcAddress
FreeLibrary
OpenFile
GetVersionExA
GetCurrentProcess
WinExec
ExitProcess
_lread
LocalFree
GetTempPathA
GlobalLock
GetDC
BeginPaint
EndPaint
InvalidateRect
PostQuitMessage
SendMessageA
DefWindowProcA
GetClientRect
CreateWindowExA
DrawTextA
ReleaseDC
ShowWindow
SetWindowPos
UpdateWindow
SetTimer
LoadIconA
wsprintfA
MessageBoxA
ExitWindowsEx
RegisterClassA
LoadCursorA
DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
TextOutA
SetTextColor
SetBkMode
SelectObject
StretchDIBits
CreateFontA
RealizePalette
SelectPalette
CreatePalette
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ