?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
df055490ea3844943caaa91bada37b56_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
df055490ea3844943caaa91bada37b56_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
df055490ea3844943caaa91bada37b56_JaffaCakes118
Size
45KB
MD5
df055490ea3844943caaa91bada37b56
SHA1
a8ba90e52fde6bd14fde5db5f926c172f2ceee4e
SHA256
b4cee33a550859e57fd59bfe673e86ca2dbcdb6ecb822fe4baf81f9fb6893b76
SHA512
b3d4af8c74b065b385bc05ef6aba12fc958ee9947dc99006119cad7e15066bcd94478c864a6e465d0252f79428f56a457544f029b0204ca5ccceae6a12fc8cf0
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBo:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWso
Checks for missing Authenticode signature.
resource |
---|
df055490ea3844943caaa91bada37b56_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ