BhoInstall
_WorkProc@4
__mp@4
Static task
static1
Behavioral task
behavioral1
Sample
fa4b80626bcdd714a4d0008c03e5872d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa4b80626bcdd714a4d0008c03e5872d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fa4b80626bcdd714a4d0008c03e5872d_JaffaCakes118
Size
67KB
MD5
fa4b80626bcdd714a4d0008c03e5872d
SHA1
d9a36f387a0067a233baa230f03cb46f5e81c7fe
SHA256
2ad911d0febed5ad3488fe2439522e202d1e1216d7df5f9b1a1a1ce71bbc1f38
SHA512
a62bf9e7f3dcba7b8975ef204a8c4857c1c5be66835d8499a0a9a0e23edfc931cf067ab3a61e28595f49300dca711944e32f5e2fb3cd2737d4cc10f52936b70a
SSDEEP
1536:Q4SNxHn5rBP0wgqQfJtVEwhES2Cqn37+izO:Q4Kxn1gqwVJES2Vr+izO
Checks for missing Authenticode signature.
resource |
---|
fa4b80626bcdd714a4d0008c03e5872d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
AdjustTokenPrivileges
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetTokenInformation
OpenProcessToken
RegDeleteValueA
SystemTimeToFileTime
GetLocalTime
CloseHandle
Sleep
ReleaseMutex
WaitForSingleObject
CreateMutexA
MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
TerminateThread
CreateFileMappingA
lstrcpyn
DeleteFileA
CreateProcessA
PulseEvent
GetFileAttributesA
GetCurrentProcess
VirtualFree
WinExec
FreeLibrary
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
VirtualProtect
VirtualQuery
lstrcmpi
InitializeCriticalSection
OpenMutexA
OpenProcess
LoadLibraryA
FlushInstructionCache
SetLastError
lstrcmp
FileTimeToSystemTime
GetCurrentThreadId
GetVersionExA
OutputDebugStringA
GetTickCount
MapViewOfFileEx
VirtualAlloc
SetThreadContext
WriteProcessMemory
VirtualProtectEx
GetThreadContext
ResumeThread
DuplicateHandle
CreateRemoteThread
FindNextFileA
FindFirstFileA
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualAllocEx
VirtualFreeEx
QueryDosDeviceA
GetLogicalDriveStringsA
CreateThread
GetTempFileNameA
GetTempPathA
CopyFileA
GetSystemDirectoryA
GetFileSize
CreateFileA
lstrcat
RemoveDirectoryA
GetWindowsDirectoryA
OpenFile
CompareFileTime
GetCurrentProcessId
CreateEventA
GetLastError
WaitForSingleObjectEx
ResetEvent
OpenEventA
SetEvent
ExitProcess
GetProcessHeap
lstrcpy
IsBadReadPtr
lstrlen
RtlFreeHeap
RtlReAllocateHeap
RtlLeaveCriticalSection
RtlEnterCriticalSection
RtlAllocateHeap
RpcStringFreeA
UuidToStringA
UuidCreate
SHGetSpecialFolderPathA
SHDeleteKeyA
MessageBoxA
wsprintfA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetCanonicalizeUrlA
_WorkProc@4
BhoInstall
_WorkProc@4
__mp@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE