go
heart
Static task
static1
Behavioral task
behavioral1
Sample
302b29a4c9cc8d8f8f6285b340163bb3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
302b29a4c9cc8d8f8f6285b340163bb3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
302b29a4c9cc8d8f8f6285b340163bb3_JaffaCakes118
Size
13KB
MD5
302b29a4c9cc8d8f8f6285b340163bb3
SHA1
91afa3ce2af61b9a3535c257bdac06c66b904292
SHA256
d9c18c33a025edcec6dd9f54fda92156d8e0fac4e7aa7acdfa723da4941c06f8
SHA512
55e405bc8a570d49bb9bc27d46740a2b58ae0db350a18d068113eb2493b06f8568b57c6f4c05678b56a1469e0598394209b882ea688000751413e9a48fe58017
SSDEEP
192:ncEaZifLqJex05LiWmZADe13fonrFREJ4vkUkpQ9LqqHqHWW7/P1oyS60OQDie:mwLD2oWm2K1IFREPnQ8qHqHWmH1s6nRe
Checks for missing Authenticode signature.
resource |
---|
302b29a4c9cc8d8f8f6285b340163bb3_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
LoadLibraryA
lstrcatA
FreeLibrary
CloseHandle
Process32Next
lstrcmpiA
Process32First
DeleteFileA
MoveFileA
LocalFileTimeToFileTime
FindFirstFileA
CreateFileA
GetTickCount
ReadFile
SetFilePointer
GetLocalTime
ReleaseMutex
GetLastError
CreateMutexA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
GetModuleHandleA
strlen
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memset
strchr
_except_handler3
_strcmpi
_strrev
go
heart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ