?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
38e22dacddffe0b83d72490d59e26208_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38e22dacddffe0b83d72490d59e26208_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
38e22dacddffe0b83d72490d59e26208_JaffaCakes118
Size
45KB
MD5
38e22dacddffe0b83d72490d59e26208
SHA1
6d59fc1ef8f5206bcc235fdbdb696aaf9042f523
SHA256
aaa2c3bf5b271fef10004adad2e0373cad622804460e99674ff0d27d670a25bb
SHA512
78812ef278e2a0ff0760a47790cdd6a3848f204e444c5f720d0205b59ce0dc6577f3e46fed1e0bd67b2fb83fc868610d6f58c0cc2771445b6fdf14a4f4f2aa22
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBh:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsh
Checks for missing Authenticode signature.
resource |
---|
38e22dacddffe0b83d72490d59e26208_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ