??0CSharedMemory@@QAE@ABV0@@Z
??4CSharedMemory@@QAEAAV0@ABV0@@Z
??_7CSharedMemory@@6B@
Static task
static1
Behavioral task
behavioral1
Sample
33999a1b10f89d3369280823b66cffd6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33999a1b10f89d3369280823b66cffd6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
33999a1b10f89d3369280823b66cffd6_JaffaCakes118
Size
104KB
MD5
33999a1b10f89d3369280823b66cffd6
SHA1
d3c8eee9b4109641255f010f1c764328721ed3af
SHA256
53b2cbef122b7a360dba7644886dfad4f040ed2ebf094fe87043b3c65b0bcbee
SHA512
b1b7962568be35d3fb6f6e2eb2c7b71fd6d5e37d70ddabc6d09d9ac54ab480f2ac7d4278ab874b734dbe8e51170a5a06a2c81edbc153f6a1fba9cfbb6d8b9574
SSDEEP
1536:gJpyOE1C90AdDNo75J84L67uKPYgat85tEKcyc2VDcm06tqfVXhwwA9tWLe:myl1uH67T8P7Qga3KcyjbHCg92
Checks for missing Authenticode signature.
resource |
---|
33999a1b10f89d3369280823b66cffd6_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_DeleteFile@4
DoAutoPilotWithTracefile
DoAutoPilotWizard
??1CSharedMemory@@UAE@XZ
?MeFirst@CSharedMemory@@QAEHXZ
??0CSharedMemory@@QAE@IPBG@Z
?Lock@CSharedMemory@@QAEHXZ
?Unlock@CSharedMemory@@QAEHXZ
?terminate@@YAXXZ
exit
_wcmdln
_XcptFilter
memset
__CxxFrameHandler
??3@YAXPAX@Z
memcpy
??2@YAPAXI@Z
wcscpy
wcschr
_except_handler3
_exit
_adjust_fdiv
__setusermatherr
__wgetmainargs
_initterm
_controlfp
__p__commode
__p__fmode
__set_app_type
GetStartupInfoW
GetModuleHandleW
??0CSharedMemory@@QAE@ABV0@@Z
??4CSharedMemory@@QAEAAV0@ABV0@@Z
??_7CSharedMemory@@6B@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE