Arg1
Arg10
Arg2
Arg3
Arg4
Arg5
Arg6
Arg7
Arg8
Arg9
CallDLL
Finished
Firstbp
Patcharea
Prepatch
WndProc
Static task
static1
Behavioral task
behavioral1
Sample
ac1894c4dab7e7304d3d4ed9a0dba196_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac1894c4dab7e7304d3d4ed9a0dba196_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ac1894c4dab7e7304d3d4ed9a0dba196_JaffaCakes118
Size
176KB
MD5
ac1894c4dab7e7304d3d4ed9a0dba196
SHA1
9136ea1a35b30a8e5aabf83634adaf57376bf167
SHA256
e3ef57823ff022aa05ede9a8482d8aea23b4f77d5f023d472b7d795ddddda539
SHA512
338e5287c9823b98cbc661b599d9bb7cb35f99319f972f870db0e42c9fdbbc03bbc00d198c2dbd6e438a7487a336ad5447c814789522de132b93cfc972c54c5f
SSDEEP
3072:u8/quhmuy3lv8YJhKGZ+87r0PW0O5TCGuieSAgKx9r8T9y4PJNBbKEnTa9+/Zh:5g/zsBP1ihKQpnJr2Sa9+r
Checks for missing Authenticode signature.
resource |
---|
ac1894c4dab7e7304d3d4ed9a0dba196_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCommandLineA
GetModuleHandleA
ExitProcess
LoadLibraryA
Sleep
CreateWindowExA
DefWindowProcA
BeginPaint
TranslateMessage
PeekMessageA
ShowWindow
DestroyWindow
RegisterClassA
LoadCursorA
LoadIconA
PostQuitMessage
DispatchMessageA
GetStockObject
Arg1
Arg10
Arg2
Arg3
Arg4
Arg5
Arg6
Arg7
Arg8
Arg9
CallDLL
Finished
Firstbp
Patcharea
Prepatch
WndProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ