?unzip@@YAPAXPADPAK@Z
InstallHook
_WorkProc@4
__mp@4
Static task
static1
Behavioral task
behavioral1
Sample
a9acc1fc032367bd4b84f3ec6b2e0a57_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9acc1fc032367bd4b84f3ec6b2e0a57_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a9acc1fc032367bd4b84f3ec6b2e0a57_JaffaCakes118
Size
60KB
MD5
a9acc1fc032367bd4b84f3ec6b2e0a57
SHA1
1f1ce0cb0427ca7bee298dd6e3d7a803596a031e
SHA256
035acf00c8bc5f92cd23baf9a57a6299bfded48be859c5f9e82ad511358a3c56
SHA512
2a71939b8935b91a8c037512efe2c38098478ee12ad9d77496b5421b5fee6a1e6d7abce79a79eeeb5d444ec7f61afe90f43ee861867af4c2e294eda9c9d9e63d
SSDEEP
768:sf8l0JS5NVc7MsiUDVXehqEkevyNzCVdK:c8lkSTVRstehqneKpCV
Checks for missing Authenticode signature.
resource |
---|
a9acc1fc032367bd4b84f3ec6b2e0a57_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
GetVersionExA
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
lstrcmpiA
HeapFree
lstrcpyA
GetLastError
HeapReAlloc
lstrlenA
GetSystemDirectoryA
InitializeCriticalSection
ExitProcess
WaitForSingleObjectEx
CloseHandle
SetEvent
OpenEventA
InterlockedIncrement
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MapViewOfFile
OpenFileMappingA
GetFileAttributesA
CreateFileMappingA
DeleteFileA
OutputDebugStringA
lstrcatA
GetTickCount
PulseEvent
CreateRemoteThread
MapViewOfFileEx
IsBadReadPtr
VirtualAlloc
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetThreadContext
ResumeThread
DuplicateHandle
OpenProcess
CreateProcessA
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualAllocEx
VirtualFreeEx
GlobalFree
CreateThread
SetFileTime
GetFileTime
CreateFileA
CopyFileA
Sleep
GetWindowsDirectoryA
CreateEventA
CreateMutexA
ReleaseMutex
GetFileSize
RemoveDirectoryA
ExitThread
OpenFile
_lclose
TerminateThread
lstrcpynA
LoadLibraryA
FreeLibrary
lstrcmpA
GetProcessHeap
HeapAlloc
FlushInstructionCache
VirtualProtect
SetLastError
GetCurrentProcess
GlobalAlloc
VirtualFree
MessageBoxA
wsprintfA
RegQueryValueExA
SetSecurityDescriptorDacl
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
InitializeSecurityDescriptor
SysFreeString
SysAllocString
InternetOpenA
InternetReadFile
InternetQueryDataAvailable
InternetOpenUrlA
InternetCrackUrlA
InternetCanonicalizeUrlA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
InternetConnectA
SHDeleteKeyA
UuidToStringA
RpcStringFreeA
UuidCreate
CoInternetGetSession
?unzip@@YAPAXPADPAK@Z
InstallHook
_WorkProc@4
__mp@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE