?jgdfgjfiogjfogC@@YAHHPADHHH@Z
?jgdfgjfiogjfogI@@YAHHPADHHH@Z
?jgdfgjfiogjfogK@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
84fa5299ef5b9cdb6d395779c968fdb3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84fa5299ef5b9cdb6d395779c968fdb3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
84fa5299ef5b9cdb6d395779c968fdb3_JaffaCakes118
Size
40KB
MD5
84fa5299ef5b9cdb6d395779c968fdb3
SHA1
92a4e766ce0dee973485e0c8af24a2eb7a2b14aa
SHA256
4d3157ec2f30169acdb98ec4dc1b8b891a0bc87f4289a45460bf304f64f748d2
SHA512
ddf5bc2d2daac0c978965b446159a664662ac79cd3179643724aa843af8d45a3d2947f83f876b9ce0218ebc46e128a8532ff1f3b47b36c870a90fb6de5b18992
SSDEEP
768:1Bwa3wLSqZkETG/jmwbU4oF4/EOi97emHGqn5DLDdQOn2skZ1:d3wLSeK/iqU4/PHmHGq5DndQ027n
Checks for missing Authenticode signature.
resource |
---|
84fa5299ef5b9cdb6d395779c968fdb3_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCurrentThreadId
InterlockedExchange
HeapAlloc
GetProcessHeap
InterlockedExchangeAdd
GetModuleHandleA
ExitProcess
CreateThread
QueryPerformanceCounter
GetACP
InterlockedIncrement
GetCurrentProcess
InterlockedDecrement
GetCurrentThread
GetTickCount
GetProcAddress
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassExA
DestroyWindow
DefWindowProcA
FindWindowA
FindWindowExA
GetCapture
GetCursor
GetActiveWindow
GetDlgItem
TextOutA
CreateSolidBrush
SetGraphicsMode
GetObjectType
GetBkColor
ResizePalette
UpdateColors
?jgdfgjfiogjfogC@@YAHHPADHHH@Z
?jgdfgjfiogjfogI@@YAHHPADHHH@Z
?jgdfgjfiogjfogK@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ