?jgdfgjfiogjfogC@@YAHHPADHHH@Z
?jgdfgjfiogjfogI@@YAHHPADHHH@Z
?jgdfgjfiogjfogK@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
25bfe7b049dd834d3331150f20b8edfa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
25bfe7b049dd834d3331150f20b8edfa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
25bfe7b049dd834d3331150f20b8edfa_JaffaCakes118
Size
40KB
MD5
25bfe7b049dd834d3331150f20b8edfa
SHA1
7586089247f489f81e1c6df83668ca3837c5cf26
SHA256
e743c31a7cfcb398c448ed6257564f5b3bd2cf1046a31d725d07f4c4ee29fc0e
SHA512
cdefc624f1d58527b13e4cd886097af683b36d4637546f9e713b03f1ede67eccd41a0c1d2828f619a38924a4490c035dcec7420b89bc38bed4f56b0202477f67
SSDEEP
768:1Bwa3wLSqZkETG/jmwbU4oF4/EOi97emHGqn5DLDdQOn2skZ5:d3wLSeK/iqU4/PHmHGq5DndQ027X
Checks for missing Authenticode signature.
resource |
---|
25bfe7b049dd834d3331150f20b8edfa_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCurrentThreadId
InterlockedExchange
HeapAlloc
GetProcessHeap
InterlockedExchangeAdd
GetModuleHandleA
ExitProcess
CreateThread
QueryPerformanceCounter
GetACP
InterlockedIncrement
GetCurrentProcess
InterlockedDecrement
GetCurrentThread
GetTickCount
GetProcAddress
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassExA
DestroyWindow
DefWindowProcA
FindWindowA
FindWindowExA
GetCapture
GetCursor
GetActiveWindow
GetDlgItem
TextOutA
CreateSolidBrush
SetGraphicsMode
GetObjectType
GetBkColor
ResizePalette
UpdateColors
?jgdfgjfiogjfogC@@YAHHPADHHH@Z
?jgdfgjfiogjfogI@@YAHHPADHHH@Z
?jgdfgjfiogjfogK@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ