?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
5c482b63c7f0ec1443536811d8b5575c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c482b63c7f0ec1443536811d8b5575c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5c482b63c7f0ec1443536811d8b5575c_JaffaCakes118
Size
95KB
MD5
5c482b63c7f0ec1443536811d8b5575c
SHA1
1ea3880780b86c9d8fdecd8e06f848f4acc01816
SHA256
beb480f448ba4f54faaa5313557c6604d6f82e194bac4034e921e0207bb704e7
SHA512
d7da18db000138a2c735b367066d55c33647eb76c5e8119074f3feb18c68d08acaf861b51df08f9b265f161a3122518faa7f59b979decfc4fdff49f3964c8f17
SSDEEP
1536:JkPMk86K98GaBz2Wez4YPY6f2zsAWBio8ft5y6Elz26PBwrC1RJchnUkzOh2:mFfl9x2Wez4Yw6ODjo8l5y6ElzJPRah8
Checks for missing Authenticode signature.
resource |
---|
5c482b63c7f0ec1443536811d8b5575c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InternetOpenA
InternetOpenUrlA
CloseHandle
HeapAlloc
GetProcessHeap
GetCurrentProcess
HeapFree
WaitForSingleObject
WriteFile
OpenProcess
GlobalAlloc
LoadLibraryA
ReadProcessMemory
ReadFile
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
CompareStringA
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ReleaseSemaphore
CreateSemaphoreA
TerminateThread
GetActiveWindow
DrawTextA
MoveWindow
ModifyMenuA
UpdateWindow
PostMessageA
ShowWindow
InvalidateRect
SetWindowLongA
GetMenu
GetForegroundWindow
SendMessageA
DrawIcon
GetWindowInfo
LoadIconA
GetWindowRect
GetDC
ReleaseDC
FindWindowA
BitBlt
LineTo
SelectObject
DeleteDC
CreateCompatibleDC
memset
?SetMegaFunction@@YGPAXKKK@Z
?SetSuperFunction@@YGPAXKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ