?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
2f5fe59cb9501a4c385b4eae592a7b03_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f5fe59cb9501a4c385b4eae592a7b03_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2f5fe59cb9501a4c385b4eae592a7b03_JaffaCakes118
Size
45KB
MD5
2f5fe59cb9501a4c385b4eae592a7b03
SHA1
b86f2c4fc962bb33d7b94a56db57504cb398cf36
SHA256
d4a7e4795c9f1af02171c0543d2a69c41b95b1c7a2399703adfd8bc74107b172
SHA512
35eabfe24f74d7f35ebf59ce1d438e0f5beee4b479344bc02c91718ba2139410ecd2cbfe546cdeecfd3045635d61b3ed4372f538b32d478334d01299d3a55fdd
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBU:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsU
Checks for missing Authenticode signature.
resource |
---|
2f5fe59cb9501a4c385b4eae592a7b03_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ