__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
64988626987ead87c1201ea5b6190acb_JaffaCakes118.exe
Resource
win7-20240221-en
Target
64988626987ead87c1201ea5b6190acb_JaffaCakes118
Size
217KB
MD5
64988626987ead87c1201ea5b6190acb
SHA1
bf73ac6e6f25f08b23ebd3f9dbd3caa0e69a098b
SHA256
74fd0f4cea9f4a58e00c437103f174849c230f12a8a15eb02f44f2070449fb91
SHA512
216fea83e0c6c44b53eb31c0302bd784f47a2f7b9f2482796789a0844c660fac93076cdf60f5236d4be175c6e19b61e844facd0bdb92e61d524e3c33b73e85e7
SSDEEP
3072:ghwzKIBjNtuBNjTFgEnf2qcmWsnvspn8XldWpz60icVgN8JSJ68UPslHh:qFIpNtuBRj2qMW0olYpz6zugNS8Esn
Checks for missing Authenticode signature.
Processes:
resource |
---|
64988626987ead87c1201ea5b6190acb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CryptAcquireContextA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
SetFileSecurityW
CloseHandle
CreateFileA
CreateThread
DeleteFileA
ExitProcess
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetUserDefaultLangID
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
ord17
GetSaveFileNameA
CreateFontIndirectA
DeleteObject
GetObjectA
SelectObject
SetTextColor
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DrawTextA
EnableMenuItem
EndDialog
EnumThreadWindows
GetDlgItem
GetDlgItemTextA
GetParent
GetWindowRect
IsDlgButtonChecked
LoadStringA
MessageBoxA
ScreenToClient
SendMessageA
SetDlgItemTextA
SetWindowPos
SetWindowTextA
ShowWindow
UpdateWindow
wsprintfA
GetSystemMenu
CoInitialize
CoUninitialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ