TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
258a1b01938399c1b3c76dfa2b2c0df2_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
258a1b01938399c1b3c76dfa2b2c0df2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
258a1b01938399c1b3c76dfa2b2c0df2_JaffaCakes118
Size
13.6MB
MD5
258a1b01938399c1b3c76dfa2b2c0df2
SHA1
e8ab7510ea9893c1738f80262006009efc2b9e19
SHA256
c1ba7f9c25e7c9f213982a74a39e9c63de88fac5e4dfd9cdf765d65b8bb506c9
SHA512
e6d2f0ca6533edf572055a2289e97703471f7344eda0463235e1780ceda318014eeaaf018338c4caa9a57d1b3bf8136ed1caf700b5c6b9cc39fed88181e8f73e
SSDEEP
393216:vd5VhxB2WeYGokjUTpaRpmYxN+fmgzdjwJkBExtnLJ:vd5z7eYGKSpD/+fVs2BYtJ
Checks for missing Authenticode signature.
resource |
---|
258a1b01938399c1b3c76dfa2b2c0df2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetupDiGetClassDevsA
PlaySoundW
LresultFromObject
DocumentPropertiesW
GetSaveFileNameW
FlatSB_SetScrollInfo
SHBrowseForFolderW
CopyImage
CharUpperBuffW
GetFileVersionInfoSizeW
SafeArrayPutElement
RegSetValueExW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
NetWkstaGetInfo
log
GetVersion
GetVersionExW
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WSAStartup
CreateDataAdviseHolder
Pie
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ