Woycd
Wspkughcocw
Static task
static1
Behavioral task
behavioral1
Sample
48e60a9ca7d86276d242e1281a0051e2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
48e60a9ca7d86276d242e1281a0051e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
48e60a9ca7d86276d242e1281a0051e2_JaffaCakes118
Size
28KB
MD5
48e60a9ca7d86276d242e1281a0051e2
SHA1
512fb797deec1dd4e6f132879b3df96e26d836f7
SHA256
a74bf22e47c20c78518b9af30bf27f0d2fd44da2dbfb2f9c1a377298e91f31a0
SHA512
08a6841fe68ee9363d74544c1b4178a18663c69799b1c34c89d51f3967ba5e1095d3f00415121486ef4fe9fae483d49efd1ea910a289e56ce7c804fab30d986f
SSDEEP
384:T75JH9HFE7kv3Fhm0aP/iT8BB2onW5wfnRcB3OQ8E03HJAeWzFUKZa:3E7Ozm038vnWgnRcBeQ8rCzpUKk
Checks for missing Authenticode signature.
resource |
---|
48e60a9ca7d86276d242e1281a0051e2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
EnterCriticalSection
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
OpenFileMappingA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
VirtualAlloc
lstrcatA
lstrcmpA
EndPaint
CloseWindow
CharUpperBuffA
EqualRect
LsaGetRemoteUserName
LsaICLookupSids
LsaLookupNames
RegEnumKeyA
RegOpenKeyExA
LsaEnumeratePrivilegesOfAccount
LsaEnumeratePrivileges
LsaEnumerateAccountRights
LsaDeleteTrustedDomain
__vbaDateStr
__vbaEraseKeepData
__vbaCyUI1
__vbaCyFix
__vbaCyErrVar
__vbaCopyBytesZero
__vbaAryVarVarg
__vbaAryConstruct2
DirectInputCreateA
DirectInputCreateW
DirectInputCreateEx
Woycd
Wspkughcocw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ