__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
5f58a29130bf18af2ee2962b1b14943d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f58a29130bf18af2ee2962b1b14943d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5f58a29130bf18af2ee2962b1b14943d_JaffaCakes118
Size
83KB
MD5
5f58a29130bf18af2ee2962b1b14943d
SHA1
67cc4de789513e2204babaec52137bbd191d34bf
SHA256
9b96bc8f6a56413c9ed5fd05204faeab7ec9bc7d65ad0a01ef5787fe4a062731
SHA512
4bc072ffd63f01543b39ed9d86bcd9bf193580c4cb9cad3c4fbd445530e7ba6cc6fc5d965d9ea957ca22ceaa4dbdc33d609cb253bd719fa754ebb5a96b4e7089
SSDEEP
1536:Tzns1CHog3Nm7Of6na5sr1o2q5yhG0GzhE+31:/nWx7Of60CKy4hE+
Checks for missing Authenticode signature.
resource |
---|
5f58a29130bf18af2ee2962b1b14943d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
CreateToolhelp32Snapshot
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetComputerNameA
GetCurrentDirectoryA
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemTime
GetTempFileNameA
GetTempPathA
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
Process32First
Process32Next
RaiseException
ReadFile
RegisterServiceProcess
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
Sleep
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
RasEnumConnectionsA
RasEnumEntriesA
RasGetEntryDialParamsA
WSACleanup
WSAStartup
accept
closesocket
connect
gethostbyname
gethostname
getsockname
htons
inet_addr
inet_ntoa
listen
recv
select
send
socket
bind
ShellExecuteA
CreateWindowExA
DefWindowProcA
DispatchMessageA
EnumThreadWindows
FindWindowA
GetMessageA
KillTimer
MessageBoxA
PostQuitMessage
RegisterClassA
SetTimer
SetWindowsHookExA
TranslateMessage
UnhookWindowsHookEx
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ