?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
05b2d4af2fd0165edc23a0e0ba63d679_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05b2d4af2fd0165edc23a0e0ba63d679_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
05b2d4af2fd0165edc23a0e0ba63d679_JaffaCakes118
Size
45KB
MD5
05b2d4af2fd0165edc23a0e0ba63d679
SHA1
4171eeb9cabf9b3aeaec3326756b6dc70eb90842
SHA256
7af3e73296e1214d79cc9c5c5abd17e28af2a2e57cf52573f8995e1db63ca6df
SHA512
a4238487ea0baa08c977e857330b51022fe49f3412406b24e1e2e0053670e2b7db289efbb446a6fd4357a569535601e94fadf4fb6ef16cceeb0a60769e380e40
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBf:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsf
Checks for missing Authenticode signature.
resource |
---|
05b2d4af2fd0165edc23a0e0ba63d679_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ