FreeGlobalObjects
GetContextSpellingSession
GetNextToken
RunCssWordBreaker
Static task
static1
Behavioral task
behavioral1
Sample
c10d5aea6033b744bc3134ca5ffbc828_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c10d5aea6033b744bc3134ca5ffbc828_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c10d5aea6033b744bc3134ca5ffbc828_JaffaCakes118
Size
354KB
MD5
c10d5aea6033b744bc3134ca5ffbc828
SHA1
49717ebbbbd1ad534de364b803fae371c152be84
SHA256
5c03bf33637810547b090e1ccfefa7dd0a1c871aeaed1ab4d90368d9c0dc6369
SHA512
81245a98012dd208d41d3ae318942486e931ea40c6449f12c89e12c55cb4394bcd4a5f5ac187e19c8a430661dfbdb3e4f1e2c566b882a35bb1e2fa207484e9a4
SSDEEP
6144:DVv5x+8ss3fZmooCwX5t19H3JcZm6LgX3HrTplRH54:7x53Rz7wX5t19HWHLK3HrTdZ4
Checks for missing Authenticode signature.
resource |
---|
c10d5aea6033b744bc3134ca5ffbc828_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DeregisterEventSource
GetTokenInformation
LookupAccountSidW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
ReportEventW
DeleteObject
CloseHandle
CompareStringW
CreateEventW
CreateFileMappingW
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPriorityClass
GetProcAddress
GetProcessHeap
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersion
GetVersionExW
GlobalAlloc
GlobalFree
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenMutexW
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
SearchPathW
SetEvent
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrlenA
lstrlenW
ord109
StgOpenStorageOnILockBytes
PropVariantCopy
PropVariantClear
CreateStreamOnHGlobal
CoWaitForMultipleHandles
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoCreateInstance
CLSIDFromString
CoUninitialize
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
VarUI4FromStr
VariantClear
VariantInit
RegisterTypeLi
LoadStringW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
CharNextW
FreeGlobalObjects
GetContextSpellingSession
GetNextToken
RunCssWordBreaker
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ