??1CVdsDebugLog@@QAE@XZ
?m_NoDebuggerLogging@CVdsDebugLog@@QAEHXZ
?m_TracingLogEnabled@CVdsDebugLog@@QAEHXZ
Static task
static1
Behavioral task
behavioral1
Sample
3bf81e866480062886265f0adb9ff7fa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3bf81e866480062886265f0adb9ff7fa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
3bf81e866480062886265f0adb9ff7fa_JaffaCakes118
Size
12KB
MD5
3bf81e866480062886265f0adb9ff7fa
SHA1
c56b2828343e1501db59f537079c6969ef22cd4b
SHA256
c231f9d52e95d2ad7d04da2d8d72750052cd045d4a2771fa87b0ab3c6f195e9e
SHA512
fdeeb49770a90fa206da7f05c6001081df6d1ee06efbed81264e09e7f9f577a3511592911000acb2d613932b7d2c26df52bbec680c1a399b423b5b7598d98963
SSDEEP
384:ZwgNTLQDlB7eE/VM9X7FrH5yYYpq4/WNa+WV:ZwayBazsYrq1
Checks for missing Authenticode signature.
resource |
---|
3bf81e866480062886265f0adb9ff7fa_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
CharNextW
exit
ord16
CoUninitialize
?VdsTraceEx@@YAXKKPADZZ
??1CVdsDebugLog@@QAE@XZ
?m_NoDebuggerLogging@CVdsDebugLog@@QAEHXZ
?m_TracingLogEnabled@CVdsDebugLog@@QAEHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE