_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
mwspp874.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
mwspp874.exe
Resource
win10v2004-20240802-en
Target
acf29ae84713e68611449c342f31414c_JaffaCakes118
Size
14.3MB
MD5
acf29ae84713e68611449c342f31414c
SHA1
9867a50ada20d2201678e8ee379a2157360d49b6
SHA256
47aa27c6163c38eda86803c2e39a3d0535b685d381b0a8f5d74bbbe6db709bec
SHA512
ff711eac73156806d928efca438b9934956502c8b109c973dd76fc3e3f56057942f8439169dda61fa946ca1011c38f079b83a748a9eaadf3890e30ebd33ecd36
SSDEEP
196608:6Npg0pJeHzjy8n6/Mck8HjBvxrFkCXEClaP2btsYLzb8MC6MSJ1VQdGu0BiN4Lhs:6RWjy86S8dpZrEXP2SOPpHiGt/Gl7o6
Checks for missing Authenticode signature.
resource |
---|
unpack001/mwspp874.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
FreeLibrary
OpenFile
LoadLibraryA
_lclose
_lopen
lstrcpyA
_lcreat
GetModuleFileNameA
GetVersionExA
SetErrorMode
lstrlenA
GetWindowsDirectoryA
GlobalHandle
_lwrite
WinExec
GlobalAlloc
GlobalFree
ExitProcess
_lread
_llseek
GlobalUnlock
GetCommandLineA
GetModuleHandleA
GlobalLock
GetClientRect
DefWindowProcA
SendMessageA
EndPaint
BeginPaint
InvalidateRect
PostQuitMessage
wsprintfA
CreateWindowExA
GetDC
ReleaseDC
SetWindowPos
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
ExitWindowsEx
MessageBoxA
RegisterClassA
CreatePalette
DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
SelectObject
SelectPalette
RealizePalette
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ