?BDVvHGDjsgdshdhbJHgdjf@@YGKK@Z
?JHDsHGDsgdshgdjsbHJGdjgs@@YGKKK@Z
?NBXDmnbfdGDjsgfysdgfd@@YGKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
6816021889bac580fc611ea7c894f50d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6816021889bac580fc611ea7c894f50d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6816021889bac580fc611ea7c894f50d_JaffaCakes118
Size
131KB
MD5
6816021889bac580fc611ea7c894f50d
SHA1
facbc367cd7e36a5e75532192ba28fe3b38e0e65
SHA256
34ad5eae08559d93856109c5f6ca68eff7cc54814ec2f71a6c6edf7b6e72cd4c
SHA512
629d41a21957ca71290ecff35de7a430e7347c4e575e9e34cfe276536711e75196b1ab47e30c713875c6b684eb84820e89d98296986183b80307ce0dfc367b56
SSDEEP
3072:jcOMJeoYYulEQkfbaTqb0tgdnf/jUK7zas/EqAt3:tMJeof+EQk2AQgdnfo+zasVAt3
Checks for missing Authenticode signature.
resource |
---|
6816021889bac580fc611ea7c894f50d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wcsrchr
_wcslwr
_wcsnicmp
_wcsicmp
ord196
SHGetPathFromIDListW
StrChrW
PostQueuedCompletionStatus
GetFileAttributesExW
CloseHandle
DeleteAtom
WaitForSingleObject
GetBinaryTypeW
GetModuleHandleExW
GetExitCodeProcess
GetNextDlgGroupItem
GetKeyboardLayout
SwitchDesktop
LoadImageA
GetDlgItemInt
KillTimer
CheckDlgButton
GetScrollPos
EnumThreadWindows
SetScrollPos
CallMsgFilterA
GrayStringW
GetMiterLimit
GetEnhMetaFileBits
DeleteDC
GetArcDirection
GetCharWidthA
DeleteColorSpace
SetPolyFillMode
CreateRectRgn
PlgBlt
GetPixel
GetObjectA
EnumFontFamiliesExA
PtInRegion
CoFileTimeNow
IsAccelerator
CoInitialize
CoUninitialize
?BDVvHGDjsgdshdhbJHgdjf@@YGKK@Z
?JHDsHGDsgdshgdjsbHJGdjgs@@YGKKK@Z
?NBXDmnbfdGDjsgfysdgfd@@YGKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ