TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
fb4533f3521412adb3b29e79cdaeac72_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb4533f3521412adb3b29e79cdaeac72_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
fb4533f3521412adb3b29e79cdaeac72_JaffaCakes118
Size
11.5MB
MD5
fb4533f3521412adb3b29e79cdaeac72
SHA1
1f2bd1d43c0f96f67c38590b7dc31b574f4698dc
SHA256
c32dceabf68a80489c71cd836a2f5aad240b3ee74824fd918c766f64c5205675
SHA512
735e57bd90ff406c2dd4e9fa3019d47abcd91fd2b78e9932069fd9bc901a32b9f47cf7eff135d74c4d443b0014a5fe26ee84118c0dbc83dcf3c37b4b625a8883
SSDEEP
196608:bads0OuC6k9VD8lY+INcXFa1x0t8PpaP4v4zz7rQmB6AA7cOcEZxNaMpoaD/9D:boO6iVItIx1xIqirQmBB83Nayb1
Checks for missing Authenticode signature.
resource |
---|
fb4533f3521412adb3b29e79cdaeac72_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SafeArrayPtrOfIndex
RegEnumValueW
GetMenuItemCount
GetVersionExW
GetVersion
VirtualQueryEx
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetTextExtentPoint32W
GetFileVersionInfoW
NetWkstaGetInfo
OleRegEnumFormatEtc
InitCommonControls
memcpy
ShellExecuteW
PrintDlgW
timeGetTime
GetDefaultPrinterW
Direct3DCreate9
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ