_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
298fdc7bb45c473f7db99fc5c589cb86_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
298fdc7bb45c473f7db99fc5c589cb86_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
298fdc7bb45c473f7db99fc5c589cb86_JaffaCakes118
Size
2.6MB
MD5
298fdc7bb45c473f7db99fc5c589cb86
SHA1
bde7048917c0dcba956e083e5d833cef774d8dad
SHA256
4eb31ce7839f6b72f0e7d49a15559e06eb98915bbe952d19ed1fdae4c245b297
SHA512
695ee0197cb4bf9007a79ba0feaf2f8464c470d127b06623610d01ad400532efbbfec8d47f6df8d3c139a6828d0b2bdc2458637f24217a52038c39f4e78b1cce
SSDEEP
49152:sawW2GXxhhfQH0W2YSbW2YTrcW2Y0heBY7XFpW/T0KHAB4r37GiHgYk61:sawTGXZQ9TSiT3lT0h97VpBTBo37GiHJ
Checks for missing Authenticode signature.
resource |
---|
298fdc7bb45c473f7db99fc5c589cb86_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
GetProcAddress
LoadLibraryA
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE