_MainWndProc@16
_StubFileWrite@12
Static task
static1
Behavioral task
behavioral1
Sample
0491f1c0f2458e43e73d108f2fc42d9f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0491f1c0f2458e43e73d108f2fc42d9f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0491f1c0f2458e43e73d108f2fc42d9f_JaffaCakes118
Size
2.8MB
MD5
0491f1c0f2458e43e73d108f2fc42d9f
SHA1
6d0e62b9c2233b4e4c4626c516f0464c0c1a9191
SHA256
b5ed7177ac50ac808f5da4c602a1c59e72b6eefde65ec11f6a87cb507e62d911
SHA512
361398f37e93fbdcdf87121267f80586199a837886e6c13a16241e920d8128b01ec10e7392117d2299de43a7b66f8fbbcd921d2f7a520847f86717b884e0cf78
SSDEEP
49152:FkEePOyqTkZWL8oVpOqbTUeCDf3n0sXqIorCQJzxUkDH6jEOORSmCcuMiavQW8dO:CEePOyqTgWLPbHqf30UqvrCQx6jhpXaP
Checks for missing Authenticode signature.
resource |
---|
0491f1c0f2458e43e73d108f2fc42d9f_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
lstrcpyA
GetCommandLineA
SetErrorMode
lstrlenA
MulDiv
GetTempFileNameA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
FormatMessageA
lstrcatA
GetLastError
_lwrite
_llseek
GlobalUnlock
_lopen
GlobalAlloc
GlobalFree
_lclose
_lcreat
LoadLibraryA
GetProcAddress
FreeLibrary
OpenFile
GetVersionExA
GetCurrentProcess
WinExec
ExitProcess
_lread
LocalFree
GetTempPathA
GlobalLock
GetDC
BeginPaint
EndPaint
InvalidateRect
PostQuitMessage
SendMessageA
DefWindowProcA
GetClientRect
CreateWindowExA
DrawTextA
ReleaseDC
ShowWindow
SetWindowPos
UpdateWindow
SetTimer
LoadIconA
wsprintfA
MessageBoxA
ExitWindowsEx
RegisterClassA
LoadCursorA
DeleteObject
GetStockObject
GetDeviceCaps
PatBlt
CreateSolidBrush
TextOutA
SetTextColor
SetBkMode
SelectObject
StretchDIBits
CreateFontA
RealizePalette
SelectPalette
CreatePalette
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
_MainWndProc@16
_StubFileWrite@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ