C_DdeCliCallBack
C_DdeSerCallBack
TwunkWndProc
Static task
static1
Behavioral task
behavioral1
Sample
eb71f1424983a16078ba70c9ce6e50f2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb71f1424983a16078ba70c9ce6e50f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
eb71f1424983a16078ba70c9ce6e50f2_JaffaCakes118
Size
216KB
MD5
eb71f1424983a16078ba70c9ce6e50f2
SHA1
9e12e0b9665ff30a6b69e067ccf3b331c67ccbfd
SHA256
3eb82d4c047d8784e2e5d7e79073a3833ae4b54620c06ea513e69d6f2d3e9ada
SHA512
9aa255d95c9c0484c5ab05574eb3e3d0cb8422162a0cdc22e519aa55d60bab1fa327209070da9ef7549703e13a494f3425f07fe3e65a939fec8de9a0da3f6bda
SSDEEP
3072:3hDa53HDcTzMorCHtMWpXLOhxWRD2xQwzEHRL2MabJppWeCMYnNWRT8/CiC2lvUL:3hDcGMBtMmOhbaRLAppWeCMYNUFJmRF
Checks for missing Authenticode signature.
resource |
---|
eb71f1424983a16078ba70c9ce6e50f2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetProfileIntA
GetLastError
LoadLibraryA
FreeLibrary
lstrcmpA
GlobalSize
GetVersion
GlobalAlloc
GlobalFree
GlobalFlags
GlobalLock
GlobalUnlock
lstrcatA
ReadFile
DeleteFileA
MultiByteToWideChar
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
GetCPInfo
GetOEMCP
GetACP
GetModuleFileNameA
UnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
SetEndOfFile
SetStdHandle
GetStdHandle
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetWindowsDirectoryA
GetCommandLineA
CloseHandle
Sleep
LockFile
UnlockFile
GetFileType
CreateFileA
GetEnvironmentStrings
InitializeCriticalSection
SetFilePointer
WriteFile
RtlUnwind
GetModuleHandleA
GetStartupInfoA
PeekMessageA
DdeQueryConvInfo
DdeConnect
DdeClientTransaction
DdeUninitialize
DdeInitializeA
DdeGetLastError
DdeFreeStringHandle
DdeCreateStringHandleA
wsprintfA
DdeCreateDataHandle
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMenu
ChangeMenuA
ShowWindow
PostQuitMessage
DefWindowProcA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
DdeNameService
DdeDisconnect
DdeGetData
DdePostAdvise
DdeCmpStringHandles
MessageBoxA
GetStockObject
C_DdeCliCallBack
C_DdeSerCallBack
TwunkWndProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE