__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
a14ad2e21d3fd7ff6730e869989065ca_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a14ad2e21d3fd7ff6730e869989065ca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a14ad2e21d3fd7ff6730e869989065ca_JaffaCakes118
Size
1.1MB
MD5
a14ad2e21d3fd7ff6730e869989065ca
SHA1
dfdcc3c6fbe8161a10d02df60c18087ca840296e
SHA256
3058fdb8b86f9afeedffe0d1bb943ca314795a9e6944082695ce8441ea2041e8
SHA512
faff57ae93837541b7944b0baff2b18bdd1235a35fffe4df848e70757943ddc2433fac3bc5418b41b7cd7adeaad8777db641a1541f58f2ad1ef0a2e9e372b5b1
SSDEEP
24576:RW3zaZisn1Uzu0ARuVGjyZMrTiXKPI0ZWBRVnWHHUxG:QzTNAByZMa6Pezng
Checks for missing Authenticode signature.
resource |
---|
a14ad2e21d3fd7ff6730e869989065ca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CloseHandle
CreateFileA
CreateProcessA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FormatMessageA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetDiskFreeSpaceA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetThreadContext
GetThreadLocale
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MoveFileA
MultiByteToWideChar
RaiseException
ReadFile
ReadProcessMemory
ResumeThread
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetThreadContext
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WideCharToMultiByte
WriteFile
WriteProcessMemory
ShellExecuteA
EnumThreadWindows
GetKeyboardType
GetSystemMetrics
LoadStringA
MessageBoxA
wsprintfA
SysAllocStringLen
SysFreeString
SysStringLen
VariantChangeTypeEx
VariantClear
VariantCopyInd
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ