?MainOneFunc@@YGPAXKK@Z
?MainTwoFunc@@YGPAXKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
843f80b07f4e01fe115a291587e84704_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
843f80b07f4e01fe115a291587e84704_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
843f80b07f4e01fe115a291587e84704_JaffaCakes118
Size
96KB
MD5
843f80b07f4e01fe115a291587e84704
SHA1
72e14ea82c15515c1a27c1608c397cd16f2ab4b4
SHA256
ab414a0de8ab8c88f0c88b0bf233b6734484245c69e90f5d493961c45035b0ff
SHA512
4ee0ed069c9da8d5c05234e6bb1c9abd97a05bc1050f4ca67ebda352395d96964d46d91429a9350d8dd47482bfcd2da984ee8cf3c6aa42a5d17f29f35acd588c
SSDEEP
1536:xOckpBYnVRGnMkVSO8zx21wNIrDPDI0xl/ksqO+Cp4:xLOGxkdFwNGTP/M
Checks for missing Authenticode signature.
resource |
---|
843f80b07f4e01fe115a291587e84704_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
malloc
memset
_except_handler3
GetModuleBaseNameA
HeapFree
WaitForSingleObject
VirtualFree
OpenProcess
GlobalAlloc
TerminateThread
ReadProcessMemory
HeapDestroy
HeapCreate
CreateProcessA
TerminateProcess
VirtualAlloc
GlobalFree
OpenThread
MoveFileA
GetExitCodeThread
GetModuleFileNameA
GetModuleHandleA
CompareStringA
GetCurrentThreadId
WriteProcessMemory
SuspendThread
ResumeThread
GetCurrentProcess
CreateSemaphoreA
GetFileSize
ReleaseSemaphore
LoadLibraryA
CloseHandle
GetFullPathNameA
HeapAlloc
GetProcessHeap
CreateFileA
CreateWindowExA
InvalidateRect
GetScrollInfo
SetWindowLongA
GetMenu
GetForegroundWindow
SendMessageA
DrawIcon
GetWindowInfo
LoadIconA
ShowWindow
DestroyWindow
SetWindowTextA
UpdateWindow
SetScrollInfo
MoveWindow
GetActiveWindow
DrawTextA
GetDC
FindWindowA
GetWindowRect
PostMessageA
ModifyMenuA
ReleaseDC
BeginPath
EndPath
TextOutA
MoveToEx
BitBlt
LineTo
DeleteDC
SelectObject
CreateCompatibleDC
Polyline
CreatePen
GetPath
PolyDraw
?MainOneFunc@@YGPAXKK@Z
?MainTwoFunc@@YGPAXKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ