StartDownload
_WorkProc@4
__mp@4
Static task
static1
Behavioral task
behavioral1
Sample
a7b7d4ba09762dee9ab1a5bd3f9106ad_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a7b7d4ba09762dee9ab1a5bd3f9106ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a7b7d4ba09762dee9ab1a5bd3f9106ad_JaffaCakes118
Size
28KB
MD5
a7b7d4ba09762dee9ab1a5bd3f9106ad
SHA1
a3ca2537340aff66bdc985d790c0547059415b70
SHA256
ca89b726231ab4564be9e6723b051d31753e06761624c14f978ec70975a1a99f
SHA512
ea0fe7184bb8256a843fc74d25f241e62cda9c24c0b71606498c7fb0dc0d1e54402a44710de0e33532986b2ea100ef52a14271d491fb5c5298d6fd90a88ac2cb
SSDEEP
768:sJml7cQ0/tGlewjywZkyQh1ZdLwT6ZBxFlqds:Z4If2g09LtBQe
Checks for missing Authenticode signature.
resource |
---|
a7b7d4ba09762dee9ab1a5bd3f9106ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WSAStartup
WSACleanup
ioctlsocket
gethostbyname
SHDeleteKeyA
UuidCreate
UuidToStringA
RpcStringFreeA
HeapAlloc
GetProcessHeap
OutputDebugStringA
lstrcmpiA
lstrcpyA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
HeapFree
lstrcatA
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
Sleep
PulseEvent
CreateThread
GetTickCount
GetCurrentThreadId
UnmapViewOfFile
WaitForSingleObject
GetLastError
CreateEventA
lstrcmpA
FreeLibrary
LoadLibraryA
lstrcpynA
CloseHandle
OpenEventA
MapViewOfFileEx
CreateFileMappingA
VirtualAlloc
VirtualFree
GetProcAddress
VirtualProtect
HeapReAlloc
SetThreadContext
FlushInstructionCache
WriteProcessMemory
VirtualProtectEx
GetThreadContext
ResumeThread
DuplicateHandle
CreateRemoteThread
OpenProcess
CreateProcessA
GetCurrentProcess
GetVersionExA
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualAllocEx
IsBadReadPtr
VirtualQuery
OpenFile
SetFileTime
GetFileTime
CreateFileA
GetFileAttributesA
GetSystemDirectoryA
DeleteFileA
WinExec
GetWindowsDirectoryA
CopyFileA
MapViewOfFile
SetLastError
RemoveDirectoryA
ExitProcess
TerminateThread
GetCurrentThread
TranslateMessage
MessageBoxA
GetMessageA
DispatchMessageA
wsprintfA
GetTokenInformation
RegDeleteValueA
RegCreateKeyExA
RegEnumValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
RegCloseKey
AdjustTokenPrivileges
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
ShellExecuteA
SHGetSpecialFolderPathA
InternetCrackUrlA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoA
StartDownload
_WorkProc@4
__mp@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE