TMethodImplementationIntercept
__GetExceptDLLinfo
___CPPdebugHook
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
25952e26333e061938d5414309fad1eb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25952e26333e061938d5414309fad1eb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
25952e26333e061938d5414309fad1eb_JaffaCakes118
Size
5.2MB
MD5
25952e26333e061938d5414309fad1eb
SHA1
b96041c53c8bccf35c9a0ed26248930afe39e2ad
SHA256
3d0c9be885a58e5e4c3cecd3575be8f5ccb98c2cbfb8c12217d05ef143092690
SHA512
067f0e75ae32c2d77cf2a44cddebf16f670e1596fd722edb29a0315f758b9b461f8412e0de86d5a58d6ea7db7eb1e89407a94840de6cfcdbf09978cba07e5cfa
SSDEEP
98304:ujwTxH55428E2SES/kGAp43hP6zW4oeES0oGU7lK7oOvVO:ujwTd5mENP/FLhPsoFSMUp+U
Checks for missing Authenticode signature.
resource |
---|
25952e26333e061938d5414309fad1eb_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
AdjustTokenPrivileges
GetVersion
GetVersionExA
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
NetApiBufferFree
GetFileVersionInfoSizeW
ClosePrinter
FlatSB_GetScrollInfo
AbortDoc
ShellExecuteW
SHGetFolderPathA
ActivateKeyboardLayout
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
CoCreateInstance
GetErrorInfo
PathFileExistsA
GetAdaptersInfo
WinHttpAddRequestHeaders
WTSEnumerateProcessesW
WTSSendMessageW
URLDownloadToFileW
TMethodImplementationIntercept
__GetExceptDLLinfo
___CPPdebugHook
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ