v@12
8f@4
__6
L
_H
_hd
_c@8
_7@20
lG@20
_q07
ZLp@20
8j_
U
_y3@16
DIa
_l
jM@12
0T
_Lky
_B5W
s6@24
tf@12
_R3u
qu
G1@4
_BV
_C0@24
0
c
5k4@20
8HK
Ns
c@16
f
k
_be
_N@8
bp
_a
_4@16
0@8
_KE
_K@12
_h1
_g
6@4
_YOy@24
_HJ
R
_Zo
_5Dl
Static task
static1
Behavioral task
behavioral1
Sample
f4fb1845a33138ac302b56e2c95aa5c0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4fb1845a33138ac302b56e2c95aa5c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f4fb1845a33138ac302b56e2c95aa5c0_JaffaCakes118
Size
191KB
MD5
f4fb1845a33138ac302b56e2c95aa5c0
SHA1
3da1a0b9b84ab292e6c9d985328c03b959adb778
SHA256
38a6968898b77b886f5be7f4839d353275c895d70f8da4f7b23af6dd240fcd85
SHA512
bc308cde34ef0db07f1dc74aae7b4ae9144bae5a2d3fbd1d9c97053b0cc51fcaed71ac0926f763d9c43e960029929e8261896046822f3da89d6cfd2443fd5dca
SSDEEP
3072:5Tf/neWcY6FOnT8rdLcnAed03Wvkx0GBBizn1STtcgr3QYo3/DvkgOufH:1nelYQ28rdLMdJvNGBkuRovDvGuf
Checks for missing Authenticode signature.
resource |
---|
f4fb1845a33138ac302b56e2c95aa5c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SafeArrayGetElement
VariantChangeType
GetErrorInfo
RegisterTypeLib
OleLoadPicture
SysFreeString
ExitProcess
GetCommandLineA
LocalAlloc
ExitThread
VirtualAlloc
GetCurrentThreadId
RegOpenKeyA
BitBlt
SetBkColor
SelectPalette
VerQueryValueA
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ImageList_Read
ImageList_Remove
ImageList_Draw
ImageList_Add
memmove
malloc
wcsncmp
sqrt
time
srand
wcschr
tolower
rand
swprintf
memcpy
Shell_NotifyIconA
SHGetFolderPathA
SHGetValueA
SHSetValueA
SHQueryValueExA
PathFileExistsA
PathIsDirectoryA
IsIconic
IsWindowUnicode
GetCursor
GetDesktopWindow
CreatePopupMenu
KillTimer
IsWindowVisible
GetMenu
LoadCursorA
GetFileTitleA
ChooseColorA
FindTextA
GetOpenFileNameA
v@12
8f@4
__6
L
_H
_hd
_c@8
_7@20
lG@20
_q07
ZLp@20
8j_
U
_y3@16
DIa
_l
jM@12
0T
_Lky
_B5W
s6@24
tf@12
_R3u
qu
G1@4
_BV
_C0@24
0
c
5k4@20
8HK
Ns
c@16
f
k
_be
_N@8
bp
_a
_4@16
0@8
_KE
_K@12
_h1
_g
6@4
_YOy@24
_HJ
R
_Zo
_5Dl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ