??0CSharedMemory@@QAE@ABV0@@Z
??4CSharedMemory@@QAEAAV0@ABV0@@Z
??_7CSharedMemory@@6B@
Static task
static1
Behavioral task
behavioral1
Sample
29eb44e3803ce2a25dce56720ec35ed0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29eb44e3803ce2a25dce56720ec35ed0_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
29eb44e3803ce2a25dce56720ec35ed0_JaffaCakes118
Size
20KB
MD5
29eb44e3803ce2a25dce56720ec35ed0
SHA1
b0a7a2d68cef4754814f4dbb737ce36ae7e6aab3
SHA256
d6900fc02fe4cd807b00e921534b6d6e7572a80259f267b0c6d2fddbd4a217e3
SHA512
d16495c4ab2e48456a0134208a7357bc57798fa0128cbc1f0fc4e4fc60fc8d5b10d2cc5cc6e9a1b96976c604ae9621a36bf648a1115274149b3b2eed629efbe7
SSDEEP
96:NcyoYeiUkT43YLovlEHShcCvtdXVFSUvTCmoy0ev1P4WmBT/WZzhx:ayoSL6lfOC3HlCmoyXCWmBT/W
Checks for missing Authenticode signature.
resource |
---|
29eb44e3803ce2a25dce56720ec35ed0_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_DeleteFile@4
DoAutoPilotWithTracefile
DoAutoPilotWizard
??1CSharedMemory@@UAE@XZ
?MeFirst@CSharedMemory@@QAEHXZ
??0CSharedMemory@@QAE@IPBG@Z
?Lock@CSharedMemory@@QAEHXZ
?Unlock@CSharedMemory@@QAEHXZ
?terminate@@YAXXZ
exit
_wcmdln
_XcptFilter
memset
__CxxFrameHandler
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
wcscpy
wcschr
_except_handler3
_exit
_adjust_fdiv
__setusermatherr
__wgetmainargs
_initterm
_controlfp
__p__commode
__p__fmode
__set_app_type
GetStartupInfoW
GetModuleHandleW
??0CSharedMemory@@QAE@ABV0@@Z
??4CSharedMemory@@QAEAAV0@ABV0@@Z
??_7CSharedMemory@@6B@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE