?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
7193a79abe154f04400c017270e31131_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7193a79abe154f04400c017270e31131_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
7193a79abe154f04400c017270e31131_JaffaCakes118
Size
45KB
MD5
7193a79abe154f04400c017270e31131
SHA1
2ee9d01af688d4df5908a0fed4e575d70b5d5755
SHA256
49a85c25c7a3abe68a4de48d79eca4ac1da4bcbb59a158464aef52ef00088fe9
SHA512
1d8a23af253cfa6bf78f6b7d38d31ee40bf7c6d5adff733369ab7fbe1d7674abfa523ac2597edee74ad338508a2607879cec908ded236c7cf574835befb4668c
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBu:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsu
Checks for missing Authenticode signature.
resource |
---|
7193a79abe154f04400c017270e31131_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ