__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
ksielog.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ksielog.exe
Resource
win10v2004-20240709-en
Target
5eec8400db59ab5814dd69751e56a4c8_JaffaCakes118
Size
44KB
MD5
5eec8400db59ab5814dd69751e56a4c8
SHA1
ad42899b6e8289808182768267cd07d5803fc039
SHA256
d2724bd979ef62df3fe333297fbd4761946063e952a20bf1b178969a7880bdf1
SHA512
e70f3d2bef8545a996c28e14866e8b0c81ab165d9a8b17cd232e65fc69d358f46df9a968e5597c18e29283f2805ad117f5a4f1c0b78a4b00b96ff73a15c6046a
SSDEEP
768:/voxickFijsva0R+vM4C7kOYzmyULhigO8mg7VWYg5+g56IE98t3oPiIH1e4bhqi:aickIjgR+UFbemLwTDYg5+Y9g8t4jH1X
Checks for missing Authenticode signature.
resource |
---|
unpack001/ksielog.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
ClearCommError
CloseHandle
CreateFileA
DeleteFileA
EscapeCommFunction
ExitProcess
GetACP
GetCPInfo
GetCommState
GetCommTimeouts
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
PurgeComm
RaiseException
ReadFile
RtlUnwind
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetupComm
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ