?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
27b1acb4ffa973b75ca70143fc50c599_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27b1acb4ffa973b75ca70143fc50c599_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
27b1acb4ffa973b75ca70143fc50c599_JaffaCakes118
Size
45KB
MD5
27b1acb4ffa973b75ca70143fc50c599
SHA1
1c054e75ffdef1a6980db34c6ffce23f47786bd2
SHA256
bab996f500b1b63e30d6d67a26cd828c33940018494beba0b846bcc755cf707b
SHA512
4385e9490ff8dae3e758271c079908bbb0c8b31f02bb7b9a553c6d1153bb1bbf452f20dd0e486cd0aa22d1ee01939e70a1e45e4de835661b570353c034070c63
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBX:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsX
Checks for missing Authenticode signature.
resource |
---|
27b1acb4ffa973b75ca70143fc50c599_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ