___CPPdebugHook
_removeHook
_setHook
Static task
static1
Behavioral task
behavioral1
Sample
f698ba1ff488e1b97214efc2644f8a30_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f698ba1ff488e1b97214efc2644f8a30_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f698ba1ff488e1b97214efc2644f8a30_JaffaCakes118
Size
3.9MB
MD5
f698ba1ff488e1b97214efc2644f8a30
SHA1
b259025272c9719819eb1c321c69e3d6a67e2304
SHA256
7d977dad1849b9814ffbe9ddc01f34de473487e77874fba338d9cb46d4ce917a
SHA512
1dd9c500eed2fe44c58e5f7cd4026f94b1d8c458f44ebc9801e090a1c7112411c5eb4bfe9ece8e2cbbf9b6b2b22ec537f063c9dc6e74141f75ad49e061713bc7
SSDEEP
98304:LF7QD9cibjA251qOoTJkZULe1jJ9h8XFmEfwButfP7fmI:tu9ci2ZVpf
Checks for missing Authenticode signature.
resource |
---|
f698ba1ff488e1b97214efc2644f8a30_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
OpenProcess
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteFile
WriteProcessMemory
EnumThreadWindows
MessageBoxA
wsprintfA
___CPPdebugHook
_removeHook
_setHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ