Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl
Static task
static1
Behavioral task
behavioral1
Sample
316a82b84a15113cf7b288df9fbf0985_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
316a82b84a15113cf7b288df9fbf0985_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
316a82b84a15113cf7b288df9fbf0985_JaffaCakes118
Size
130KB
MD5
316a82b84a15113cf7b288df9fbf0985
SHA1
7279af59e67e9e09cf45b7cfc5be3c7aa5f1f722
SHA256
d1e34e12495c135992f40a5a30077f3f4cbfb4c0b5587a485e12fbea1ce61343
SHA512
2a7bb1a6fb317e01d6e377cc347dee22aac1a3f4817961eae71fbb6097cef843fb445130cc0b940482fec6683bd12c4b21378a086aa92e0ffe8e8a89fbf5b7dd
SSDEEP
3072:oSAGAvbyLNOyBwwJMHURoHbL/0KMMiU1m9:jAnYNOozM5n0KNP
Checks for missing Authenticode signature.
resource |
---|
316a82b84a15113cf7b288df9fbf0985_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib
ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus
WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject
SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups
SHGetFileInfoA
SHBindToParent
SHFileOperationA
PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA
time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf
TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile
Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ