?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
47203ffd9fef95f438eafbf4cf208e44_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47203ffd9fef95f438eafbf4cf208e44_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
47203ffd9fef95f438eafbf4cf208e44_JaffaCakes118
Size
95KB
MD5
47203ffd9fef95f438eafbf4cf208e44
SHA1
3e6ece01b6700ece8704a54dba3b9864698fb594
SHA256
80ff6bb7c6a4ca1d028accf97d45c9fe11275b842fb5e7a16930964dbc8e2906
SHA512
fc98a4f6b4cbc388b07b412950bf3864835fe3902fa991e60ae8e3aeb362befcc5c75bd6053f6c2d864bb59a9376da8e747f3b787be6626806098c17f5d62070
SSDEEP
1536:gRhDd23kBIWb+E/tZbxLaIo45TdbYLYMmUPcfJwJ/l19ALYrQEXaebRtn:SBd20p5F5xLaIo4QM0Sk/P7XtbRZ
Checks for missing Authenticode signature.
resource |
---|
47203ffd9fef95f438eafbf4cf208e44_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InternetOpenA
InternetOpenUrlA
HeapFree
WriteFile
OpenProcess
GlobalAlloc
ReadProcessMemory
HeapCreate
ReadFile
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
WaitForMultipleObjects
CompareStringA
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ResumeThread
GetProcessHeap
CreateSemaphoreA
ReleaseSemaphore
HeapAlloc
LoadLibraryA
CloseHandle
ModifyMenuA
UpdateWindow
PostMessageA
ShowWindow
InvalidateRect
SetWindowLongA
GetMenu
GetForegroundWindow
SendMessageA
DrawIcon
GetWindowInfo
LoadIconA
GetWindowRect
MoveWindow
DrawTextA
ReleaseDC
FindWindowA
GetActiveWindow
GetDC
BeginPath
EndPath
LineTo
DeleteDC
SelectObject
CreateCompatibleDC
TextOutA
BitBlt
memset
?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ