?JHfkdjshgkKJHfkjsdhgkjds@@YGKKK@Z
?KJdsjHgfdkhgfdgfdgfgGhgfhg@@YGKKKK@Z
?Xcfdcgfhgfbfdhgbdfh@@YGKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
440649c9b4e7e9e9bc7d57e95aba5d5f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
440649c9b4e7e9e9bc7d57e95aba5d5f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
440649c9b4e7e9e9bc7d57e95aba5d5f_JaffaCakes118
Size
134KB
MD5
440649c9b4e7e9e9bc7d57e95aba5d5f
SHA1
f628ef0c8a3b4aa483e69cd825b38902d92ef858
SHA256
145f8549f6af52ead567ab11ae896e8a2ac2817ba0410f5ad4e88709b6faa4f5
SHA512
37db6f22446f3f789e63064655be4cf6c42dbf8bc88e9ae21b8f4f4ea5fd7b60bce7a515c32453f1ccda9366dd1da8ae142ea8f1c89532ec223d3862eb4f2257
SSDEEP
1536:oXYapdE+QWslcDB16uwfSxq3VneTSTUAOUlOoqpGMW7tIENUePqrg4Jfb5rej05:ohUhKn6ITFm9WG13NhyE4pxCG56+G3i
Checks for missing Authenticode signature.
resource |
---|
440649c9b4e7e9e9bc7d57e95aba5d5f_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_wcsupr
_chkstk
SHIsFileAvailableOffline
SHGetMalloc
SHGetIconOverlayIndexA
SHFreeNameMappings
StrChrA
SizeofResource
GetExitCodeProcess
BackupRead
lstrcmpiA
BeginUpdateResourceW
HeapSetInformation
CreateMutexA
CloseHandle
GlobalAddAtomW
GetThreadTimes
SetFileAttributesW
SearchPathW
GetModuleHandleW
GetLogicalDriveStringsW
WaitForSingleObject
TileWindows
InvalidateRect
DrawTextExA
GetUpdateRgn
GetDlgItemInt
SetClipboardViewer
CharToOemA
RegisterClipboardFormatW
SetDlgItemTextW
ValidateRgn
CountClipboardFormats
SetMessageQueue
BeginPath
StrokePath
CreateColorSpaceA
MaskBlt
GetBoundsRect
PtInRegion
CreateCompatibleDC
CreateRectRgn
StrokeAndFillPath
WidenPath
OleGetAutoConvert
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CreateOleAdviseHolder
?JHfkdjshgkKJHfkjsdhgkjds@@YGKKK@Z
?KJdsjHgfdkhgfdgfdgfgGhgfhg@@YGKKKK@Z
?Xcfdcgfhgfbfdhgbdfh@@YGKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ