@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
1c3054ded5f016db776e819b989b06b0_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c3054ded5f016db776e819b989b06b0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
1c3054ded5f016db776e819b989b06b0_JaffaCakes118
Size
45KB
MD5
1c3054ded5f016db776e819b989b06b0
SHA1
085edde4b369f74d565affbe8d1400a59d0d879b
SHA256
003a8cff4f44cf27d6eda9f086473f1f357609c153602d95e7b0ed40fa48080b
SHA512
5b77411136e2b0010b8d021b01185bac7eed4189a262c05126752c07ddefc68f720c7f7b78dd88372ebbc2976078d46726a6fd02b1e54074f9f69c8d718d0a61
SSDEEP
768:2KMjt/BTyWsjeAi5WnVz4/JpIN/Z5g+GBU45KT8xpp/8Un0F2byWTFckoY:2KMPTyLjiWnwJuVZCz5o8pV8Un0AbNT3
Checks for missing Authenticode signature.
resource |
---|
1c3054ded5f016db776e819b989b06b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
GetModuleHandleA
LoadLibraryA
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE