__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
49f38b97bc7cb39e09f1284e3c0e9d00_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
49f38b97bc7cb39e09f1284e3c0e9d00_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
49f38b97bc7cb39e09f1284e3c0e9d00_JaffaCakes118
Size
257KB
MD5
49f38b97bc7cb39e09f1284e3c0e9d00
SHA1
2cde6f55769250827bc45bc37eda74932e21c800
SHA256
825337ca5215c32036aa461ca279751e80ccb7b22e6c62141a597c07b2e359e3
SHA512
0dc5693b05f3f70874f1e7ca7f566065555c522df70110a9fd56097d643438d43e00adb3eff523143e6c83e17e146574c31c51682a30bec09fe3280a88258975
SSDEEP
6144:5MxJKa1LjNxbuJXJ39EXJsUrA1HOweBdpqWCPSysiVcSDl:5MxxRj7buJXJ3CaWA3uSD
Checks for missing Authenticode signature.
resource |
---|
49f38b97bc7cb39e09f1284e3c0e9d00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
URLDownloadToFileA
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CloseHandle
CompareStringA
CopyFileA
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeThread
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeExA
GetStringTypeW
GetThreadLocale
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEvent
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcpynA
lstrlenA
WSAAsyncSelect
WSACleanup
WSAStartup
connect
htons
ioctlsocket
recv
send
shutdown
socket
GetFileTitleA
ShellExecuteA
BlockInput
CallNextHookEx
CharNextA
CreateWindowExA
DefWindowProcA
DispatchMessageA
EnumThreadWindows
ExitWindowsEx
GetActiveWindow
GetKeyState
GetKeyboardType
GetMessageA
GetSystemMetrics
GetWindowTextA
KillTimer
LoadStringA
MessageBoxA
PostQuitMessage
RegisterClassA
SetTimer
SetWindowsHookExA
TranslateMessage
UnhookWindowsHookEx
wsprintfA
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VarBoolFromStr
VarBstrFromBool
VarBstrFromCy
VarBstrFromDate
VarCyFromStr
VarDateFromStr
VarI4FromStr
VarNeg
VarNot
VarR8FromStr
VariantChangeTypeEx
VariantClear
VariantCopy
VariantCopyInd
VariantInit
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ