?ewrwer@@YGHPAEH@Z
?i923847293874qh049qw@@YGXHID@Z
Static task
static1
Behavioral task
behavioral1
Sample
f53303d5bc12bed0ac10046ecaa24a30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f53303d5bc12bed0ac10046ecaa24a30_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f53303d5bc12bed0ac10046ecaa24a30_JaffaCakes118
Size
348KB
MD5
f53303d5bc12bed0ac10046ecaa24a30
SHA1
db5495c64c2244d58294993c86767a16ff57bda9
SHA256
beb9b626dab7de144a48c61a4964fa5b15e874d114161668f0b65da5e146f528
SHA512
2dc7b4f8dd8f1cec6d0734e4f8c0d32595b894c93f72f00b130e06f935e9c9d845c1a508e2c82f1ed45033eb548737834018eea32991c2cbb411e719056e56af
SSDEEP
6144:lVCzJ3TH2yU+/KvE6qLGZiRl/si3+iEcJC+hcO8ZtIUqmljABeo+t:TCzd2CCM6qzXVEKfcTtIUqmljABl+t
Checks for missing Authenticode signature.
resource |
---|
f53303d5bc12bed0ac10046ecaa24a30_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
swprintf
_vsnprintf
_onexit
__dllonexit
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_adjust_fdiv
_initterm
_wtol
wcsstr
_wtoi
_wcsnicmp
_ftol
memmove
wcscmp
__RTDynamicCast
_purecall
realloc
__CxxFrameHandler
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z
ord21
ord18
ord22
ord23
ord15
ord32
ord30
ord16
lstrlenA
GetModuleHandleA
IsBadWritePtr
GetProcAddress
LoadLibraryA
IsBadReadPtr
FreeLibrary
lstrcpynA
GetACP
TryEnterCriticalSection
lstrcmpA
IsBadStringPtrA
lstrcpyA
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
GetSystemTimeAsFileTime
SetEvent
RegisterWaitForSingleObject
UnregisterWait
CreateEventA
OutputDebugStringA
lstrcatA
GetLocalTime
HeapAlloc
GetProcessHeap
SetLastError
HeapFree
UnregisterWaitEx
WaitForSingleObject
WaitForMultipleObjects
CreateThread
QueueUserWorkItem
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
EnterCriticalSection
SleepEx
LeaveCriticalSection
DisableThreadLibraryCalls
CoInitializeEx
CoUninitialize
IIDFromString
StringFromIID
CoCreateFreeThreadedMarshaler
CreateBindCtx
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoCreateInstance
StringFromGUID2
VariantClear
SysAllocString
SysFreeString
LoadRegTypeLi
SetErrorInfo
VariantInit
VariantCopy
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
RegOpenKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA
RegQueryValueExA
GetWindowLongW
UnregisterClassW
DestroyWindow
DispatchMessageW
TranslateMessage
PeekMessageW
UnregisterDeviceNotification
MsgWaitForMultipleObjectsEx
RegisterDeviceNotificationW
CreateWindowExW
RegisterClassW
DefWindowProcW
LoadStringW
wsprintfW
SetWindowLongW
PlaySoundA
TraceRegisterExA
TracePrintfA
TraceDeregisterA
?ewrwer@@YGHPAEH@Z
?i923847293874qh049qw@@YGXHID@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ