@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
4adbc6ba8dd6426cdeaeb161bc1f3941_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4adbc6ba8dd6426cdeaeb161bc1f3941_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
4adbc6ba8dd6426cdeaeb161bc1f3941_JaffaCakes118
Size
52KB
MD5
4adbc6ba8dd6426cdeaeb161bc1f3941
SHA1
8f827d88a6b12fdd2e075c4a1695a50a173c2e96
SHA256
90b8ca107145ad93fa0290044db4d5007f40d9965ef1bb3c6c6ac51f4eaa3baf
SHA512
e0396f572d0bddfdba44ec5862ab65a0446aa154d784cb19ebc0f425cc5ad288f4e8b9fd5cb335525fbfce37abcf366fb11f8ed4aced9e114d353b53e8b7eddd
SSDEEP
768:SLiBDb39nbXePFuF1xMhsS2gWZsoGnir3cnHyZzPYCVeL:SLK3NnbXePwFrMObg6GrSZzPYCV8
Checks for missing Authenticode signature.
resource |
---|
4adbc6ba8dd6426cdeaeb161bc1f3941_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetStdHandle
EnterCriticalSection
ExitProcess
CloseHandle
FillConsoleOutputCharacterA
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
FillConsoleOutputAttribute
CreateFileA
GetFileAttributesA
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetCurrentThreadId
GetEnvironmentStrings
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
PeekConsoleInputA
RaiseException
ReadConsoleInputA
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
GetStartupInfoA
MessageBoxA
EnumThreadWindows
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ