_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
Achates.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Achates.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
netadmininstall.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
netadmininstall.exe
Resource
win10v2004-20240802-en
Target
a7a6d16ebf2988b7c8fe699be3331f8d_JaffaCakes118
Size
485KB
MD5
a7a6d16ebf2988b7c8fe699be3331f8d
SHA1
63d9abc02a8837f696122affa69b4c46f7b10c7b
SHA256
92f2a6c23bb721e20bd7d2e8530ccd634dce555e05b1438950013a7c5f8b5dba
SHA512
ffa7a5a7ab4ef00760478a56b63330381376d1de7e21828666bda33248e07e7b8212ed298596c9f7c78396c6b649225b6f5181fd2bc6668dae3c93dabb65bb27
SSDEEP
12288:M0RpIXY4LQGotSeq8yVmnGjo1yV4LTAgrgK+LQ9:M0RpII4zeq8yVoDkC37+m
Checks for missing Authenticode signature.
resource |
---|
unpack001/netadmininstall.EXE |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
FreeLibrary
OpenFile
LoadLibraryA
_lclose
_lopen
lstrcpyA
_lcreat
GetModuleFileNameA
GetVersionExA
SetErrorMode
lstrlenA
GetWindowsDirectoryA
GlobalHandle
_lwrite
WinExec
GlobalAlloc
GlobalFree
ExitProcess
_lread
_llseek
GlobalUnlock
GetCommandLineA
GetModuleHandleA
GlobalLock
GetClientRect
DefWindowProcA
SendMessageA
EndPaint
BeginPaint
InvalidateRect
PostQuitMessage
wsprintfA
CreateWindowExA
GetDC
ReleaseDC
SetWindowPos
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
ExitWindowsEx
MessageBoxA
RegisterClassA
CreatePalette
DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
SelectObject
SelectPalette
RealizePalette
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ