@@Funtion@Finalize
@@Funtion@Initialize
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
67c69504e736ae0798510fa2ec3fa6e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67c69504e736ae0798510fa2ec3fa6e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
67c69504e736ae0798510fa2ec3fa6e5_JaffaCakes118
Size
134KB
MD5
67c69504e736ae0798510fa2ec3fa6e5
SHA1
f0686eca97ffdd058cbe18018ddad6f47f79223f
SHA256
b78be060484ad2e35f4840ae1d5a03d54a217b5ef456936d85ba1ab8201aec04
SHA512
2fa3da60f0da36e4a02afdf86cbf04eddda73c6662d1ee4b1b4ecca893e3b5cb27a629d1d14a83d7eca3002876ffcf37a1d8e602baebe8e9cece5122b7879ef5
SSDEEP
1536:/P1m/dq/Kkcq+fYsiYGbvKj/cdjp7hKaRkR9YzwcKm5c6/urqmGMGGNjBRuMAWM:/P+dq/KrfY5Wj/C7UnYdK0c621NWWM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67c69504e736ae0798510fa2ec3fa6e5_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeExA
GetStringTypeW
GetThreadLocale
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLocalTime
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WinExec
WriteFile
lstrcpynA
lstrlenA
GetSecurityInfo
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SetEntriesInAclA
SetSecurityInfo
ShellExecuteA
URLDownloadToFileA
CharNextA
EnumThreadWindows
GetKeyboardType
GetSystemMetrics
LoadStringA
MessageBoxA
wsprintfA
@@Funtion@Finalize
@@Funtion@Initialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE