TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
yvdzVvgJBq21Q4Vj08nD40
Static task
static1
Behavioral task
behavioral1
Sample
f2cfe890aefce18d45bdc65687bc6dab_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2cfe890aefce18d45bdc65687bc6dab_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f2cfe890aefce18d45bdc65687bc6dab_JaffaCakes118
Size
5.8MB
MD5
f2cfe890aefce18d45bdc65687bc6dab
SHA1
c7b8eb014405770c156d39c6c7adfb09194bad78
SHA256
ec124a69d84320f700bc5b1f99ccaac586676e32337d37a299bbf2abb92f56c4
SHA512
9eb112356cc222ee168f98904a98b359fd4c099b6579df327bbfcd560d3f10fbacffaaa02b245c237b6d7ba1288f895834ec732e087ceccb7da41d03238eb990
SSDEEP
98304:UWDEhGabl/RiV9I0UY4M/kOOfnajJ0txZ3qypaOI8fITZAFVyhs7G8miVMGYbCXe:UekhbliImdJ0HZ6ypTfI6tyzGS
Checks for missing Authenticode signature.
resource |
---|
f2cfe890aefce18d45bdc65687bc6dab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlaySoundW
FindFirstUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetSpecialFolderLocation
DdeSetUserHandle
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetFileVersionInfoSizeW
GetErrorInfo
RegSetValueExW
NetWkstaGetInfo
memcpy
WinHttpGetIEProxyConfigForCurrentUser
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
gethostbyaddr
OleRegEnumVerbs
Pie
RtlCompressBuffer
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
yvdzVvgJBq21Q4Vj08nD40
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ