@@Mainform@Finalize
@@Mainform@Initialize
@@Rform@Finalize
@@Rform@Initialize
_Form2
__GetExceptDLLinfo
___CPPdebugHook
_pForm
Static task
static1
Behavioral task
behavioral1
Sample
4b5c69757a2037d4fef1f62cf6b4e002_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b5c69757a2037d4fef1f62cf6b4e002_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
4b5c69757a2037d4fef1f62cf6b4e002_JaffaCakes118
Size
6.0MB
MD5
4b5c69757a2037d4fef1f62cf6b4e002
SHA1
2674342477d196e89ca5bad73e3bd1fa451f3aa5
SHA256
0303089577566a21401ee420f859a46956f933784063c58b4b4d559529e12844
SHA512
9caab6a624744de9692b024c72860fac6aebe9d30c7c60980a9156826932676c4f0e4b715f354a3436fe099999591740fbea9c1d385b900a6fe9d85c0a6acfe1
SSDEEP
98304:aeiFMLg7o2zRz1TeGPwtb246brsrxCD8GLs0h4dc:Tk7Zd1dIt/6/LD8I4a
Checks for missing Authenticode signature.
resource |
---|
4b5c69757a2037d4fef1f62cf6b4e002_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
RegConnectRegistryW
GetVersionExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
WNetCloseEnum
GetFileVersionInfoW
DocumentPropertiesW
ImageList_GetImageCount
SetStretchBltMode
AlphaBlend
SHGetSpecialFolderPathW
IsZoomed
timeGetTime
OleInitialize
VariantChangeType
InternetConnectW
@@Mainform@Finalize
@@Mainform@Initialize
@@Rform@Finalize
@@Rform@Initialize
_Form2
__GetExceptDLLinfo
___CPPdebugHook
_pForm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ