TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
Sleeping_Dogs_Definitive_Edition_BIN_Text_Tool.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Sleeping_Dogs_Definitive_Edition_BIN_Text_Tool.exe
Resource
win10v2004-20240508-en
Target
477a57f87e0bbea9a95ca81489395211_JaffaCakes118
Size
797KB
MD5
477a57f87e0bbea9a95ca81489395211
SHA1
e4ca29f91bff9cd54d3c502afa97165e62fe1a6f
SHA256
487ad6653b2d09efc1bf359c8fb31ec3c75b133255ed06ddf199e77923c96245
SHA512
844dbac0779eaa25f6a55a3bdf339c8175c019bb9fb7b3e07d1ca464a027be80de471ec262eb528841f93f81fc7893209ddc1904f1d6f6d38b4e1f96b7ec4ddc
SSDEEP
24576:PAVPvk+I25Ptlwc+hCqRH7mTnEzAW8qObUofe7fZOlYPH:es+75onRHST9W8PbUXfZXH
Checks for missing Authenticode signature.
resource |
---|
unpack001/Sleeping_Dogs_Definitive_Edition_BIN_Text_Tool.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleHandleA
GetProcAddress
SysFreeString
RegCloseKey
CharNextW
Pie
VerQueryValueW
NetWkstaGetInfo
IsEqualGUID
ImageList_Add
ShellExecuteW
GetSaveFileNameW
OpenPrinterW
memset
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE