?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
defeddbf842ebc5c8a14ffdc3df3e31c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
defeddbf842ebc5c8a14ffdc3df3e31c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
defeddbf842ebc5c8a14ffdc3df3e31c_JaffaCakes118
Size
45KB
MD5
defeddbf842ebc5c8a14ffdc3df3e31c
SHA1
f1be05fecc1a259b9c5a4776e929f793e608c5c1
SHA256
badda6fb1605546733cc0e2a9528618d56d920ded1c16590715fc849e38b9f41
SHA512
55f31c4cc7d8b3fd19d97585a82deefda22d20a9c95ac2ff5a6ad2bf3ba0ca578b73232704868349a19aee9714986ed51763cb9a2f8977a3b5b2bdb91ffc0f0a
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBS:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsS
Checks for missing Authenticode signature.
resource |
---|
defeddbf842ebc5c8a14ffdc3df3e31c_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ