?SayGoodBye@@YGPAXKKKK@Z
?SayHello@@YGPAXKKK@Z
?SayWhatsUp@@YGPAXKKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
25fcacbd46520d98e7f084f27d10034b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25fcacbd46520d98e7f084f27d10034b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
25fcacbd46520d98e7f084f27d10034b_JaffaCakes118
Size
95KB
MD5
25fcacbd46520d98e7f084f27d10034b
SHA1
3c9b15cfa2522d559463072f68d3aee696eceb30
SHA256
af7ac4660abdd812caf5785cdbe5d88047f2ee7571d61b7c9b375d471366f7de
SHA512
56e89729e27d6d826e593023de7694c4e0adca338a6026a1485f3a171715274c920935e135eae5f0340482ec99edb2ef37696ebe90f5f963b8f5d8d3e483d0a6
SSDEEP
1536:3Y5RftENpgcl7uYUJB44pU0BTM2llMMhWzW1AChVgKX08LHj9:oqNLl7uJBzpU0e2llJkzEACPkKH5
Checks for missing Authenticode signature.
resource |
---|
25fcacbd46520d98e7f084f27d10034b_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
malloc
memset
InternetCloseHandle
InternetOpenA
ord747
CoTaskMemFree
CoTaskMemAlloc
GradientFill
GetProcessHeap
ExitProcess
HeapFree
WaitForSingleObject
WriteFile
OpenProcess
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileA
WaitForMultipleObjects
CompareStringA
CloseHandle
WriteProcessMemory
SuspendThread
ResumeThread
CreateThread
HeapAlloc
CreateMutexA
ReleaseMutex
GetUpdateRect
GetActiveWindow
ReleaseDC
GetDC
DrawTextA
ModifyMenuA
IsWindowVisible
ShowWindow
GetWindowLongA
InvalidateRect
SetWindowLongA
GetMenu
GetForegroundWindow
BeginPaint
DrawEdge
SendMessageA
LoadIconA
GetWindowRect
EndPaint
SetWindowTextA
UpdateWindow
DrawFrameControl
GetWindow
DestroyWindow
MoveWindow
CreateWindowExA
GetPath
ExtFloodFill
DrawEscape
InvertRgn
CreateDCA
ExtCreateRegion
EndPath
BeginPath
ExtCreatePen
PathToRegion
ExtTextOutA
BitBlt
SelectObject
PolyDraw
?SayGoodBye@@YGPAXKKKK@Z
?SayHello@@YGPAXKKK@Z
?SayWhatsUp@@YGPAXKKKK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ