Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
EPatronInstall.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
EPatronInstall.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
system.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
system.exe
Resource
win10v2004-20240419-en
Target
136054efa52bc67a5ed11af45dd9a5b6_JaffaCakes118
Size
1.7MB
MD5
136054efa52bc67a5ed11af45dd9a5b6
SHA1
d5a72adf38d2acb3b8a0170e1b9239424cc4dd36
SHA256
74f4ef71eb7b8bda3eb848ca8c9af94e7d8bf98ddfdca8adfd109905534dbf1d
SHA512
57c37c451b7a9d1186b0559fa47164c07418a173866de608985a761250a792eaf23033ca1f85cf0d57662e934397414e9061cb40ed012569f47d454103298c87
SSDEEP
49152:3IOri++76StwCmugnk6jo7AY5NR8WYZIoZ:3Iqi++76YwZuWk6jo7T5UWu
Checks for missing Authenticode signature.
resource |
---|
unpack001/system.exe |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\MyCode\EyeGuard\Installer\Package\EP\EPPackage\EPatronInstall.pdb
AreFileApisANSI
WriteFile
VirtualFree
VirtualAlloc
DeleteFileW
LockResource
LoadResource
FindResourceW
SetUnhandledExceptionFilter
SetErrorMode
LocalAlloc
GlobalFree
GetLocalTime
GetModuleHandleW
VerifyVersionInfoW
VerSetConditionMask
GlobalUnlock
GlobalLock
GetCurrentThreadId
ReadFile
GetFileSize
CreateFileW
LocalFree
SetEndOfFile
HeapSize
WriteConsoleW
FlushFileBuffers
RemoveDirectoryW
GetTempPathW
FindClose
Sleep
FindFirstFileW
GlobalAlloc
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcess
CreateProcessW
GetExitCodeProcess
GetLastError
GetCurrentProcessId
OpenProcess
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryW
GetPrivateProfileIntW
WritePrivateProfileStringW
FreeLibrary
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetProcessHeap
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
GetModuleHandleExW
HeapFree
HeapReAlloc
HeapAlloc
LoadLibraryExW
RtlUnwind
RaiseException
FindNextFileW
SizeofResource
GetProcAddress
LoadLibraryW
GetModuleFileNameW
GetPrivateProfileStringW
ReleaseMutex
WaitForSingleObject
CloseHandle
MoveFileExW
DosDateTimeToFileTime
SystemTimeToFileTime
DuplicateHandle
SetFileTime
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
GetCurrentDirectoryW
FreeResource
ExitProcess
GetACP
InterlockedIncrement
InterlockedDecrement
MulDiv
GetFileType
SetFilePointer
CreateMutexW
CreateWindowExW
GetParent
GetWindowThreadProcessId
GetWindowRect
GetDesktopWindow
PostMessageW
SendMessageW
PostQuitMessage
PtInRect
IsWindow
UpdateLayeredWindow
IsIconic
IsZoomed
SetFocus
GetKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
GetCursorPos
CreateCaret
GetCaretBlinkTime
SetCaretPos
ScreenToClient
MapWindowPoints
IntersectRect
UnionRect
IsRectEmpty
GetWindow
SetWindowRgn
MessageBoxW
MonitorFromWindow
CallWindowProcW
RegisterClassW
GetClassInfoExW
EnableWindow
SetPropW
GetPropW
SetCursor
InflateRect
OffsetRect
CharNextW
CharPrevW
DrawTextW
FillRect
SetRect
HideCaret
ShowCaret
GetCaretPos
ClientToScreen
GetSysColor
SetWindowTextW
GetWindowTextLengthW
CreateAcceleratorTableW
GetWindowTextW
GetMonitorInfoW
MoveWindow
DestroyWindow
SetWindowPos
SetWindowLongW
ShowWindow
GetWindowLongW
InvalidateRgn
RegisterClassExW
LoadCursorW
DefWindowProcW
EnumWindows
GetFocus
Rectangle
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateDIBSection
BitBlt
CreateCompatibleBitmap
CreateFontIndirectW
CreatePen
GetStockObject
SelectClipRgn
RestoreDC
SaveDC
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateSolidBrush
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
SetTextColor
GetObjectA
MoveToEx
TextOutW
GetDeviceCaps
OpenProcessToken
ImpersonateLoggedOnUser
RevertToSelf
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DuplicateTokenEx
RegSetValueExW
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetFolderPathW
CLSIDFromProgID
CLSIDFromString
RevokeDragDrop
RegisterDragDrop
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitialize
OleLockRunning
GdipCloneImage
GdipAlloc
GdipCreateFromHDC
GdipDeleteGraphics
GdipFree
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectRectI
GdipDisposeImage
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipCreatePath
GdipDeletePath
GdipAddPathLineI
GdipAddPathArcI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipDrawRectangleI
GdipDrawPath
GdipFillRectangleI
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipCreateLineBrushI
GdipCreateStringFormat
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStream
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetModuleFileNameExW
EnumProcessModules
CryptMsgGetParam
CertCloseStore
CryptMsgClose
CertFindCertificateInStore
CertGetNameStringW
CertFreeCertificateContext
CryptQueryObject
PathFileExistsW
PathIsDirectoryW
ord219
SysAllocString
SysFreeString
VariantInit
VariantClear
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
ord17
_TrackMouseEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\MyCode\F-Telegram\9.28\RegsiterExe\Release\system.pdb
CreateProcessW
CloseHandle
GetModuleFileNameW
GetPrivateProfileStringW
WriteConsoleW
DecodePointer
FlushFileBuffers
SetFilePointerEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EncodePointer
RaiseException
GetLastError
SetLastError
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CompareStringW
LCMapStringW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
CreateFileW
ShellExecuteW
PathFileExistsW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ