?ReflectArg@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?ReflectIntro@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?ReflectOut@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
2dc1cf27c40c2a851b970fcde60eff8c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2dc1cf27c40c2a851b970fcde60eff8c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2dc1cf27c40c2a851b970fcde60eff8c_JaffaCakes118
Size
143KB
MD5
2dc1cf27c40c2a851b970fcde60eff8c
SHA1
7c46775939471625e4fd30cdce88327365497fc5
SHA256
fac7f635be17e9cf4491dc7122121822e02058d669c6eacd39e4abd1ea672863
SHA512
2e1e066e82dad9005f44e1afd3fcfb4041ff43a14333a96ad2b1f8b3aba881e45c0e0406f16bd8645e06dfd42562eb1f68b60dcc6ad9cd594fc1d2496b2a8774
SSDEEP
3072:cO+0iR5jGwmKL/WS7EJexrOzV9p9HtsPmmTCSpID0JQvfcArXs:hVKGwJF7EJIrA3sPPID0Jth
Checks for missing Authenticode signature.
resource |
---|
2dc1cf27c40c2a851b970fcde60eff8c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseWindow
InvalidateRgn
IsCharAlphaA
memset
lstrlenA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
lstrcpynA
StrCmpLogicalW
PathStripPathA
StrStrA
?ReflectArg@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?ReflectIntro@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?ReflectOut@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ