?MainOneFunc@@YGPAXKK@Z
?MainTwoFunc@@YGPAXKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
638aa8ad1beca6a85158ba44e752dcd2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
638aa8ad1beca6a85158ba44e752dcd2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
638aa8ad1beca6a85158ba44e752dcd2_JaffaCakes118
Size
96KB
MD5
638aa8ad1beca6a85158ba44e752dcd2
SHA1
af1a06f90bce305e6a3f852c8338984c54ad903e
SHA256
a10c76f1ebde7c9adf2af33fc7669202dc21f4b2409a961ca7a3fcbcbfaa77ef
SHA512
57b01891f9b3efd5600d75af4323af04217bba0ac093144cca7790f75b6ff559e73ca86abc3827bd6370c6dd74b92987eae45c1b64ce17639309f6c1f4b8d9fb
SSDEEP
1536:wOckppYnYRGn/kg7xXayveWemVR21g5ObpiRsRrDPDI0xl/ksqO+Cp4t:wLO+dkg7xNWcRdIpi2TP/Mt
Checks for missing Authenticode signature.
resource |
---|
638aa8ad1beca6a85158ba44e752dcd2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
malloc
memset
_except_handler3
GetModuleBaseNameA
HeapFree
WaitForSingleObject
VirtualFree
OpenProcess
GlobalAlloc
TerminateThread
ReadProcessMemory
HeapDestroy
HeapCreate
CreateProcessA
TerminateProcess
VirtualAlloc
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
CompareStringA
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ResumeThread
GetCurrentProcess
CreateSemaphoreA
GetFileSize
ReleaseSemaphore
LoadLibraryA
CloseHandle
GetFullPathNameA
HeapAlloc
GetProcessHeap
CreateFileA
CreateWindowExA
InvalidateRect
GetScrollInfo
SetWindowLongA
GetMenu
GetForegroundWindow
SendMessageA
DrawIcon
GetWindowInfo
LoadIconA
ShowWindow
DestroyWindow
SetWindowTextA
UpdateWindow
SetScrollInfo
MoveWindow
GetActiveWindow
DrawTextA
GetDC
FindWindowA
GetWindowRect
PostMessageA
ModifyMenuA
ReleaseDC
BeginPath
EndPath
TextOutA
MoveToEx
BitBlt
LineTo
DeleteDC
SelectObject
CreateCompatibleDC
Polyline
CreatePen
GetPath
PolyDraw
?MainOneFunc@@YGPAXKK@Z
?MainTwoFunc@@YGPAXKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ