??0IExentCtlInstaller@@QAE@ABV0@@Z
??0IExentCtlInstaller@@QAE@XZ
??4IExentCtlInstaller@@QAEAAV0@ABV0@@Z
??_7IExentCtlInstaller@@6B@
Static task
static1
Behavioral task
behavioral1
Sample
4a27203e7facc230a59f2486b94655a2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a27203e7facc230a59f2486b94655a2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4a27203e7facc230a59f2486b94655a2_JaffaCakes118
Size
972KB
MD5
4a27203e7facc230a59f2486b94655a2
SHA1
c2fc09dae453db05c51895a8f80a32b880af8b70
SHA256
ad0c476b62316c47801a3a0f14f7c43864a1b98d3fbfb1756cc7b16aacdcd741
SHA512
45fc724af73e1d91b1e2ace521efc17d4289e437d307c191e04469718bf4e622b38f069b6f8744c47876ad8736a95e0bb59c73932647151ef91ce5f87af5762e
SSDEEP
24576:tRxvMp+/QlYqSjosVYYJ5JRIAgSnH+HQqQfp2eks:tfMpYYA8sVt5/1gSe1Qfvks
Checks for missing Authenticode signature.
resource |
---|
4a27203e7facc230a59f2486b94655a2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetEvent
GetExitCodeThread
CreateThread
OutputDebugStringA
GetLastError
CreateEventA
LocalFree
SetFileTime
ReadFile
LocalAlloc
GetFileSize
WriteFile
SetFilePointer
LockResource
LoadResource
SizeofResource
FindResourceA
WaitForSingleObject
CreateFileA
GetModuleFileNameA
GetTempPathA
GetTickCount
GetProcAddress
LoadLibraryW
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
FreeLibrary
CloseHandle
IsBadReadPtr
FlushFileBuffers
WideCharToMultiByte
CreateProcessA
LoadLibraryExA
LoadLibraryA
DeleteFileA
CreateDirectoryA
RemoveDirectoryA
MoveFileA
CopyFileA
GetFileAttributesA
FindFirstFileA
FindNextFileA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
CreateProcessW
LoadLibraryExW
GetTempPathW
CreateFileW
DeleteFileW
CreateDirectoryW
RemoveDirectoryW
MoveFileW
CopyFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
ReleaseSemaphore
GetVersionExA
CreateSemaphoreA
GetModuleFileNameW
FindClose
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
GetFileType
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
InterlockedDecrement
InterlockedIncrement
SetHandleCount
GetStdHandle
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
wsprintfA
SetWindowTextA
LoadIconA
SendMessageA
PostMessageA
DestroyIcon
PostQuitMessage
CreateDialogParamA
FindWindowA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
ShowWindow
ShellExecuteExA
ShellExecuteA
ShellExecuteExW
InitCommonControlsEx
CoInitialize
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
??0IExentCtlInstaller@@QAE@ABV0@@Z
??0IExentCtlInstaller@@QAE@XZ
??4IExentCtlInstaller@@QAEAAV0@ABV0@@Z
??_7IExentCtlInstaller@@6B@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ