@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
6adc483552875790d46996d47a22569b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6adc483552875790d46996d47a22569b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6adc483552875790d46996d47a22569b_JaffaCakes118
Size
36KB
MD5
6adc483552875790d46996d47a22569b
SHA1
42363b980911441cfe24de65235089a6f91f6343
SHA256
a82b10ee46ad0d85a675d3b151951b9ad53f5a6ddcc93836a2848fdba32876ff
SHA512
19ebc44de85de87a4fd8b7a5da95c5cdc6efffea8c33d970a205c68e545a840c7b636902588f38863a5265888515379c6ebd0833ce15ae5ef0f5badc46731e42
SSDEEP
384:71g4afG4E3+FaZdTlc3YHTxbfh5Fx8wSpxdi4tahYQll49qwXI5WQkscGp3g4OS:64a7FcKYH75FqI4trQtSUcGpwVS
Checks for missing Authenticode signature.
resource |
---|
6adc483552875790d46996d47a22569b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetStartupInfoA
CreateFileA
EnterCriticalSection
GetEnvironmentStrings
GetCommandLineA
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentThreadId
CloseHandle
GetFileAttributesA
GetFileType
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
ExitProcess
GetStdHandle
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
PeekConsoleInputA
RaiseException
ReadConsoleInputA
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
SQLConfigDataSource
MessageBoxA
EnumThreadWindows
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ