__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
76b6fe8ce42c75132d6fda4d1633217e_JaffaCakes118.exe
Resource
win7-20240704-en
Target
76b6fe8ce42c75132d6fda4d1633217e_JaffaCakes118
Size
685KB
MD5
76b6fe8ce42c75132d6fda4d1633217e
SHA1
ae0957213ab811fd90f7fdc36eac72244f8cd097
SHA256
7e82f48a745f27ee7411dc21124fb98ea041ff92ce3eaca3e57e030ec776beaf
SHA512
292272f925a2fcd30ebe9d695f9c132129dd06a4bd65c71ac3b63836f160d1bbf0c5ac6b51a9615d31c56409e1bc6076a03b664b91a8b257aa09c78815941457
SSDEEP
12288:AO3vxbq/s0g8tCOUWpdN7RV45e/QTttmM4uNEY+Vh6yv9tKwTEOp:NeZ3N7RV43BtBc7nKSvp
Checks for missing Authenticode signature.
resource |
---|
76b6fe8ce42c75132d6fda4d1633217e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
ExitProcess
FindResourceA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetThreadContext
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LockResource
RaiseException
ReadProcessMemory
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetThreadContext
SizeofResource
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualProtectEx
WriteFile
WriteProcessMemory
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ