__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
8efa83f9ed4ddcbfda6d15705b8262cb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8efa83f9ed4ddcbfda6d15705b8262cb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
8efa83f9ed4ddcbfda6d15705b8262cb_JaffaCakes118
Size
180KB
MD5
8efa83f9ed4ddcbfda6d15705b8262cb
SHA1
809a4e564971e4d68fe805869eee374036ff3836
SHA256
7aa2b053de81d8e0fb20b68358f90dc5cd20c956ec2cffc3095df628fea56042
SHA512
8d3b78d8522c25e1bf84791219530539c9e4b2d1201377edb404b58c34c3152dd23ea8b197329798462e34a67a914692719ec4471b08af5344def2fc244913a6
SSDEEP
3072:Sq74vYTKWuxVXYKTMciruSzIsYPit5mZquIRdNExi+PkxLrUc:P4w+BxVI8MvTzIXgf9Rf+Pka
Checks for missing Authenticode signature.
resource |
---|
8efa83f9ed4ddcbfda6d15705b8262cb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SHGetValueA
SHSetValueA
FtpCreateDirectoryA
FtpDeleteFileA
FtpGetFileA
FtpGetFileSize
FtpOpenFileA
FtpPutFileA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetReadFile
GetUserNameA
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateMutexA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindFirstVolumeA
FindNextFileA
FindNextVolumeA
FindVolumeClose
GetACP
GetCPInfo
GetCommandLineA
GetCompressedFileSizeA
GetComputerNameA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVolumePathNamesForVolumeNameA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenFile
OpenProcess
Process32First
Process32Next
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
ShellExecuteA
SHGetFolderPathA
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE