?SayGoodBye@@YGPAXKKKK@Z
?SayHello@@YGPAXKKK@Z
?SayWhatsUp@@YGPAXKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
6f5afb0d89e154cd1bc3cabbfd5c29f0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f5afb0d89e154cd1bc3cabbfd5c29f0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6f5afb0d89e154cd1bc3cabbfd5c29f0_JaffaCakes118
Size
95KB
MD5
6f5afb0d89e154cd1bc3cabbfd5c29f0
SHA1
e0a9748155997c64a6e1199335e2faeada053524
SHA256
dd4b183ebb03ee057973ff25e1f49feb954bf1deb67f3686ca27f7e0be1d1c14
SHA512
abac35ca12573983a5b0734b28513cba2f590762845b503aa4d9a7e5c754da220f3cfdc820323a56eb79a67cdb6b651189a289b7ae473cfdfb1ada0812dc5b01
SSDEEP
1536:9Y5RfHE8pgcl74YUR8Xp+Za+AS82BAT+0kmi8lMMhWzW1AChVgKX08LHj:yo8Ll74achdBAumi8lJkzEACPkKH
Checks for missing Authenticode signature.
resource |
---|
6f5afb0d89e154cd1bc3cabbfd5c29f0_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
malloc
memset
InternetCloseHandle
InternetOpenA
ord747
CoTaskMemFree
CoTaskMemAlloc
GradientFill
GetProcessHeap
ExitProcess
HeapFree
WaitForSingleObject
WriteFile
OpenProcess
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileA
WaitForMultipleObjects
CompareStringA
CloseHandle
WriteProcessMemory
SuspendThread
ResumeThread
CreateThread
HeapAlloc
CreateMutexA
ReleaseMutex
GetUpdateRect
GetActiveWindow
ReleaseDC
GetDC
DrawTextA
ModifyMenuA
IsWindowVisible
ShowWindow
GetWindowLongA
InvalidateRect
SetWindowLongA
GetMenu
GetForegroundWindow
BeginPaint
DrawEdge
SendMessageA
LoadIconA
GetWindowRect
EndPaint
SetWindowTextA
UpdateWindow
DrawFrameControl
GetWindow
DestroyWindow
MoveWindow
CreateWindowExA
GetPath
ExtFloodFill
DrawEscape
InvertRgn
CreateDCA
ExtCreateRegion
EndPath
BeginPath
ExtCreatePen
PathToRegion
ExtTextOutA
BitBlt
SelectObject
PolyDraw
?SayGoodBye@@YGPAXKKKK@Z
?SayHello@@YGPAXKKK@Z
?SayWhatsUp@@YGPAXKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ