?Olololololo11@@YGPAXXZ
?Olololololo22@@YGPAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
233960469eb7d0cbd9dc47fe604e0263_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
233960469eb7d0cbd9dc47fe604e0263_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
233960469eb7d0cbd9dc47fe604e0263_JaffaCakes118
Size
97KB
MD5
233960469eb7d0cbd9dc47fe604e0263
SHA1
b3f2326bf6084cef6c8a82f5fcde503a8a077edb
SHA256
dc1e3eb876dd1b476ec8b4d759009a142dd3ac2cb78404e5e2ab5b28db604257
SHA512
3a98442dfe8a150048291ec516519787f7da547ece8afe59912b17e8546bc56dcaa0eb65968ed31b926fa30dc5a6e0cace429bce79b1c5fe2475c878cc10b202
SSDEEP
1536:AUxj55AsOOtSgmjA/suByobWcu2EFb7TEw9KzBT9g3ioQx+:HdltSgl/suBpbWcFEZ59KzBT2rY
Checks for missing Authenticode signature.
resource |
---|
233960469eb7d0cbd9dc47fe604e0263_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
memset
_except_handler3
GetModuleBaseNameA
CloseHandle
CreateFileA
GetFileSize
TlsGetValue
VirtualQuery
HeapAlloc
GetCurrentProcess
HeapFree
VirtualFree
GetProcessHeap
TlsSetValue
OpenProcess
TerminateThread
ReadProcessMemory
CreateProcessA
TerminateProcess
VirtualAlloc
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ResumeThread
WaitForSingleObject
ReleaseSemaphore
CreateSemaphoreA
GlobalAlloc
GetActiveWindow
CreateWindowExA
InvalidateRect
SendMessageA
GetWindowRect
ModifyMenuA
SetScrollInfo
UpdateWindow
PostMessageA
ShowWindow
GetScrollInfo
SetWindowLongA
GetMenu
GetForegroundWindow
DestroyWindow
DrawTextA
GetWindowInfo
GetDC
ReleaseDC
SetWindowPos
SetWindowTextA
MoveWindow
FindWindowA
MoveToEx
BitBlt
Polyline
CreateCompatibleDC
SelectObject
DeleteDC
LineTo
CreatePen
?Olololololo11@@YGPAXXZ
?Olololololo22@@YGPAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ