__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
4896225e91dcd5867ebce8da32f7d209_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4896225e91dcd5867ebce8da32f7d209_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4896225e91dcd5867ebce8da32f7d209_JaffaCakes118
Size
179KB
MD5
4896225e91dcd5867ebce8da32f7d209
SHA1
527f31a291c0c55fc28aaeff21bbadf1525a7187
SHA256
11f53d369dbf4ea64d9002a21d4276224a9d75eee09b44f40ac395d212d4b77b
SHA512
8c91f4adeb61264f582bbee23cf756bb0b9a8597107b370c9152d1edb867af14ac35f0dbdc158a755fc8e541399d423b77651a91c86c80e98baf17efdfe37bdf
SSDEEP
3072:r95CT0QJxuXYKkM5oeAG/sYPfqVFwu+bkMsEhEXbnMr4rycn:R8nxuILMWVG/Xi+vbFhEXbnMrty
Checks for missing Authenticode signature.
resource |
---|
4896225e91dcd5867ebce8da32f7d209_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SHGetValueA
SHSetValueA
FtpCreateDirectoryA
FtpDeleteFileA
FtpGetFileA
FtpGetFileSize
FtpOpenFileA
FtpPutFileA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile
GetUserNameA
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindFirstVolumeA
FindNextFileA
FindNextVolumeA
FindVolumeClose
GetACP
GetCPInfo
GetCommandLineA
GetCompressedFileSizeA
GetComputerNameA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumePathNamesForVolumeNameA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenFile
OpenProcess
Process32First
Process32Next
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
ShellExecuteA
SHGetFolderPathA
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ