___CPPdebugHook
z
Static task
static1
Behavioral task
behavioral1
Sample
aa6a111e408fa3c95cae1af6fae81097_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
aa6a111e408fa3c95cae1af6fae81097_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
aa6a111e408fa3c95cae1af6fae81097_JaffaCakes118
Size
236KB
MD5
aa6a111e408fa3c95cae1af6fae81097
SHA1
01fc406d4ae4c8dd28cb081902b31f1816203673
SHA256
5390e6285f83e4a9c059b05c23f5c5463e412682c4d54ced7e6b6554ee44fdc9
SHA512
1b3578f9c730df466e7d42b19119db9a96186eea29184a3ee5e66eda5ec37a8c29068824e879b827a7a565d1fe099354c8250b1a23cc3e4472bcbe6fa0def7e9
SSDEEP
1536:1dKaTHN2ymZ0ofa5uQm4V7HG8ldINh+RhFtFftCgpcGO5lPf/XG8GmGwktbf:1Y4tIQG8XAmbFfaGc1fawk1f
Checks for missing Authenticode signature.
resource |
---|
aa6a111e408fa3c95cae1af6fae81097_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseHandle
CreateFileA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
Process32First
Process32Next
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrlenA
GetFileVersionInfoA
GetFileVersionInfoSizeA
closesocket
gethostbyname
htons
setsockopt
CharLowerA
EnumThreadWindows
MessageBoxA
wsprintfA
___CPPdebugHook
z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ