_AllocateMemory@12
_MovePointer@8
_PowerDevice@8
_ShowLED@4
Static task
static1
Behavioral task
behavioral1
Sample
25a39ca774ea6f322646d8295654d335_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25a39ca774ea6f322646d8295654d335_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
25a39ca774ea6f322646d8295654d335_JaffaCakes118
Size
92KB
MD5
25a39ca774ea6f322646d8295654d335
SHA1
3be7b773e057525280600902a54e215573812b63
SHA256
50327b9a3dd908e367ff76685a9a22922a931db4d2c32c213a29c65df659ade2
SHA512
fac2803befd8780859bc80647650ffec23d78bea75629553a2980e319e5530dbc9b8218be052fe3c71ac72cd6c78f4fdc8450674301d44e4c447e823ad200dd2
SSDEEP
1536:Tz3AA7ERmQGPnN/t9M3KIavf7VNxApVy0wQzIaKy1bbFBahp0m:90mQGPnre6bvfJky0wYIaKy1/Hahp0m
Checks for missing Authenticode signature.
resource |
---|
25a39ca774ea6f322646d8295654d335_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??2@YAPAXI@Z
??3@YAXPAX@Z
remove
sprintf
rename
GdipRestoreGraphics
GdipDrawString
GdipAddPathCurve2I
GdipSaveGraphics
GdipAddPathCurveI
GdipAddPathClosedCurveI
GdipAddPathCurve3I
GdipMeasureString
GdipCloneBrush
GdipDeleteBrush
GdipCreateMatrix2
GdipCreateMatrix
GetProcAddress
FreeLibrary
InterlockedExchange
GetLastError
GlobalFree
LocalAlloc
SetFilePointer
FreeResource
SetEndOfFile
SetTapeParameters
MoveFileW
LockResource
GetTapeParameters
GetCommandLineW
GetEnvironmentVariableW
HeapAlloc
QueueUserAPC
LoadLibraryA
VirtualProtect
CloseHandle
GetThreadContext
CreateFiber
SetErrorMode
HeapFree
WideCharToMultiByte
HeapCreate
SetTimeZoneInformation
CreateProcessA
RaiseException
GlobalHandle
GetFocus
GetMessageA
GetWindowRect
DestroyMenu
DispatchMessageA
GetMenuItemCount
FrameRect
GetSysColorBrush
GetListBoxInfo
SetWindowLongW
ReleaseDC
GetWindowLongW
SetRect
TrackPopupMenuEx
GetMenu
LockWindowUpdate
TranslateMessage
GetDC
wsprintfW
DialogBoxParamW
GetWindowDC
QueryServiceConfigW
RegCreateKeyA
ChangeServiceConfigA
QueryServiceStatus
RegQueryInfoKeyA
RegQueryValueA
RegEnumKeyA
RegisterServiceCtrlHandlerA
_AllocateMemory@12
_MovePointer@8
_PowerDevice@8
_ShowLED@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ