_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
3dbccd0c1ceab840838eed20a0fc6152_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3dbccd0c1ceab840838eed20a0fc6152_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3dbccd0c1ceab840838eed20a0fc6152_JaffaCakes118
Size
3.6MB
MD5
3dbccd0c1ceab840838eed20a0fc6152
SHA1
c9640704687072c8e6619553d8b935128d9f2899
SHA256
2d7fdc84035258c19df6959c42008d56ec96911553f2c3801daf6907b10b41ab
SHA512
2779511fff8d4a00bb1cdf6e0f04f93b5cb451c5bcdc782abc42e71d72da6bc59d43840c300d611649756cc4025a128b4ad3cad878059a1a43ce3fcb574d1190
SSDEEP
49152:qvY6xSirb9XY8U5Ld4Mu1wmNFIfk+AbhlRvBJD+/yFkrp2Agcr3yIVp/mvsG1xcQ:qvYNbpd4M4zc81fG2krECmEIx319YC
Checks for missing Authenticode signature.
resource |
---|
3dbccd0c1ceab840838eed20a0fc6152_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
_lopen
_lcreat
lstrcpyA
GetProcAddress
_lclose
lstrlenA
GetWindowsDirectoryA
GlobalHandle
_lwrite
_llseek
FreeLibrary
WinExec
GlobalFree
_lread
GlobalUnlock
GetModuleFileNameA
SetErrorMode
GlobalLock
GetLastError
GetCurrentProcess
WriteFile
GetStdHandle
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GlobalAlloc
DeleteFileA
FreeEnvironmentStringsA
GetEnvironmentStrings
RtlUnwind
VirtualAlloc
UnhandledExceptionFilter
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
FreeEnvironmentStringsW
VirtualFree
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitWindowsEx
LoadCursorA
MessageBoxA
RegisterClassA
SetWindowPos
LoadIconA
UpdateWindow
ShowWindow
ReleaseDC
wsprintfA
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
SendMessageA
InvalidateRect
GetClientRect
CreateWindowExA
GetDC
DeleteObject
GetDeviceCaps
RealizePalette
GetStockObject
SelectObject
PatBlt
SelectPalette
CreatePalette
CreateSolidBrush
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ