?AJifoijfsc@@YAHHPADHH@Z
?AJifoijfsh@@YAHHPADHH@Z
?AJifoijfsi@@YAHHPADHH@Z
?AJifoijfsm@@YAHHPADHH@Z
?AJifoijfso@@YAHHPADHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
bed242e10ac8f8d943c01f117807ae0b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bed242e10ac8f8d943c01f117807ae0b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bed242e10ac8f8d943c01f117807ae0b_JaffaCakes118
Size
42KB
MD5
bed242e10ac8f8d943c01f117807ae0b
SHA1
02c4b845854d06c2c4ce7e8a1fc977d9a8854d0c
SHA256
3dfda64ea9a9bb1f2323031779bb28ae4db2eafdbc17c72bc8657b8faeb37e5b
SHA512
4effcb7ce5886f2f86607f338904ca9b46a7aaa4359c32ff25dce56681ff97591d80c1b04ec19701f8b578c9bbfcd5b6ee7a2b0676ae9ad471598a3845c63d0c
SSDEEP
768:36Esy4oMuVJ9UFAp5v32pk9M7dZOJZBCN2T328Ro9H/auPl6eQPF0WABy:psH8OFA7K7dya2G4o9RP6PFbJ
Checks for missing Authenticode signature.
resource |
---|
bed242e10ac8f8d943c01f117807ae0b_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCurrentThread
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
CreateThread
InterlockedIncrement
InterlockedExchangeAdd
InterlockedDecrement
InterlockedExchange
GetCurrentProcess
GetTickCount
GetProcAddress
GetMessageA
CreateWindowExA
RegisterClassExA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetCursor
GetActiveWindow
FindWindowA
GetBkColor
SetBitmapBits
GetObjectType
ResizePalette
CreateSolidBrush
SetGraphicsMode
?AJifoijfsc@@YAHHPADHH@Z
?AJifoijfsh@@YAHHPADHH@Z
?AJifoijfsi@@YAHHPADHH@Z
?AJifoijfsm@@YAHHPADHH@Z
?AJifoijfso@@YAHHPADHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ