Woycd
Wspkughcocw
Static task
static1
Behavioral task
behavioral1
Sample
3f2147adf734b03dd4203d75be8e3ef8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f2147adf734b03dd4203d75be8e3ef8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3f2147adf734b03dd4203d75be8e3ef8_JaffaCakes118
Size
34KB
MD5
3f2147adf734b03dd4203d75be8e3ef8
SHA1
a785c4d0a08b5dcb5b67daa2fc7d53531c86fc79
SHA256
ad9658f80c9bf508e8b0b04ad7ca6d15641b211679188a63c6eeec11ada8fdc2
SHA512
f8d1898fc9812100d5407789758349f9d7089c27e782158a2b143bde22257e3cccab8c4946a730a5624f3e4a6c4a2e0bf20079060b0098ce49a026da1a016fed
SSDEEP
768:VwGayxUjJ+oo1pVNJR9S8aAYu40iNMzpu+4+zEui:SGayUjoooBPS8apb+Vz
Checks for missing Authenticode signature.
resource |
---|
3f2147adf734b03dd4203d75be8e3ef8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
EnterCriticalSection
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
OpenFileMappingA
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TlsGetValue
VirtualAlloc
lstrcatA
lstrcmpA
EndPaint
CloseWindow
CharUpperBuffA
EqualRect
LsaGetRemoteUserName
LsaICLookupSids
LsaLookupNames
RegEnumKeyA
RegOpenKeyExA
LsaEnumeratePrivilegesOfAccount
LsaEnumeratePrivileges
LsaEnumerateAccountRights
LsaDeleteTrustedDomain
__vbaDateStr
__vbaEraseKeepData
__vbaCyUI1
__vbaCyFix
__vbaCyErrVar
__vbaCopyBytesZero
__vbaAryVarVarg
__vbaAryConstruct2
DirectInputCreateA
DirectInputCreateW
DirectInputCreateEx
Woycd
Wspkughcocw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ