?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
Static task
static1
Behavioral task
behavioral1
Sample
43048e96f6466b1e611f06fd30d041ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
43048e96f6466b1e611f06fd30d041ce_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
43048e96f6466b1e611f06fd30d041ce_JaffaCakes118
Size
45KB
MD5
43048e96f6466b1e611f06fd30d041ce
SHA1
fd3f2da06bb1b548ea53a2ed920304119d3f3b6b
SHA256
be4c091a072fa8b3459ae3c35551601996f2f9dc62a923f45f7effbd6ab38fe6
SHA512
c72fe6a767b5d8d66da43a4ead6bfff3c3a72bbe4c9f34f5ba128940010f5baa7a97bf8e60110ffecf93c007c2382583f5526b177ace553c7a07d5d7c893b4f4
SSDEEP
768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBz:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsz
Checks for missing Authenticode signature.
resource |
---|
43048e96f6466b1e611f06fd30d041ce_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA
MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor
TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors
CoInitialize
?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ