?FCalcI2@@YAKK@Z
?FCalcI@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
02a612bf31a2ed9a1ed69dbabaf1bdc5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02a612bf31a2ed9a1ed69dbabaf1bdc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
02a612bf31a2ed9a1ed69dbabaf1bdc5_JaffaCakes118
Size
112KB
MD5
02a612bf31a2ed9a1ed69dbabaf1bdc5
SHA1
ebc1beaf8cc87605dd690c829357a4805d1d840b
SHA256
e5de475a17366bc0cc1c6a8b802c6649c257440a4299c929ebb42b7d54b8c0c4
SHA512
f918d4f5c824687fd4353e18da6335fb6fabe658a735978a213d7e646e411b67b8aeb30d1f6111913f2d383023df036f14cbae2c4e6337e4e49b4dedb231a5f0
SSDEEP
3072:bo8FkcP4veQOxO9cNbWK43LYEkfS6bfY9Igi8D:8+A9a279swi0
Checks for missing Authenticode signature.
resource |
---|
02a612bf31a2ed9a1ed69dbabaf1bdc5_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
TerminateThread
TerminateProcess
GetProcAddress
GetTickCount
OpenEventA
VirtualAlloc
LoadLibraryExW
GetSystemInfo
VirtualProtect
GetLocaleInfoA
CloseHandle
SetStdHandle
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
VirtualQuery
LoadIconA
ShowWindow
EnableWindow
DestroyWindow
CoInitialize
select
?FCalcI2@@YAKK@Z
?FCalcI@@YAKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ