@__lockDebuggerData$qv
@__unlockDebuggerData$qv
GetAppFlags
UpdateIniAppFlagList
__DebuggerHookData
Static task
static1
Behavioral task
behavioral1
Sample
64f8aaf175751663738041a05ac4483b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64f8aaf175751663738041a05ac4483b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64f8aaf175751663738041a05ac4483b_JaffaCakes118
Size
44KB
MD5
64f8aaf175751663738041a05ac4483b
SHA1
d8270ced94216189a3f16e6ee180ebb61c7a5849
SHA256
32c3a9f5ce815fccdd88d63067d9b5e4110b0448e4a91928720429c1b9b532cf
SHA512
6b841a11aeb874a9531e34dccccad47252760d9cb441e4125c5f089abafe129c1bc38ef83426a080e36e61fbe74b3e95ee61f1141068eeec573df8f35a347d71
SSDEEP
768:eEH+IdzmX4iFlDN8Qwh8NE78wlQgMlu6utb1D0oGtiWsPxg:euq4iF9wGNc8wlxMlGd1D/GQxg
Checks for missing Authenticode signature.
resource |
---|
64f8aaf175751663738041a05ac4483b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetTickCount
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetCommandLineA
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStrings
CloseHandle
GetVersion
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetFileAttributesA
CreateFileA
GlobalMemoryStatus
GetFileType
InitializeCriticalSection
IsBadReadPtr
LeaveCriticalSection
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
WritePrivateProfileStringA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetStdHandle
MessageBoxA
EnumThreadWindows
CharUpperA
wsprintfA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
GetAppFlags
UpdateIniAppFlagList
__DebuggerHookData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ