TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
724324dad1a962913a26e00624b77d0e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
724324dad1a962913a26e00624b77d0e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
724324dad1a962913a26e00624b77d0e_JaffaCakes118
Size
9.9MB
MD5
724324dad1a962913a26e00624b77d0e
SHA1
3756e09d208a67373e85b2b232847d3d63d9c353
SHA256
8db23ff60ca831aaf6d64b76fd47e0d0fac64ca66d5554cecd702e9aebf59f77
SHA512
54a96a39321012ef94930e02aa1fe9fbab2cd967bc2d53f0a3c6937fc96051edc2dbfe5517597d3141a0e7b3222d3612985beb50a9ebb55dba90a887ea10eac9
SSDEEP
196608:tB8LB34KlXKUaXCIndQFuXL4Zq44fMYPWmZhcKLLWeBUkVKyF:QL2Kl9aXC4dQkvPWm7cMLWI1B
Checks for missing Authenticode signature.
resource |
---|
724324dad1a962913a26e00624b77d0e_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
RegSetValueExW
ImageList_GetImageInfo
GetOpenFileNameW
Pie
WNetGetConnectionW
wcstombs
NetWkstaGetInfo
StgCreateDocfileOnILockBytes
SafeArrayPutElement
SHBrowseForFolderW
SHGetFolderPathW
PathMatchSpecW
PathIsRelativeW
CopyImage
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetFileVersionInfoSizeW
WinHttpGetIEProxyConfigForCurrentUser
InternetCloseHandle
PlaySoundA
DocumentPropertiesW
send
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ