__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
ad318eff4d1c4b2a81447d24491770b9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ad318eff4d1c4b2a81447d24491770b9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ad318eff4d1c4b2a81447d24491770b9_JaffaCakes118
Size
2.2MB
MD5
ad318eff4d1c4b2a81447d24491770b9
SHA1
117ba96883824ff2856a70dce4cde5f7d75f1591
SHA256
d083391240e428dbe6537ea3ef9660c61126900c769f361e5053a0b109af0036
SHA512
31eb16188c61a78ccf8f63bea2b973992379a321632595980b67c8ca736d0b3bde5c89b69608becc6a5d423e158658ef625baa468621e0a7c2f11b15920c2a6c
SSDEEP
49152:qMMMMMMDiSDCSAgtzyf+RruBKrfOMmrQ5ei/ChjI0/tmLtq2SK:qMMMMMMD3DE6z+WKyWMmrQ5Np0lT2R
Checks for missing Authenticode signature.
resource |
---|
ad318eff4d1c4b2a81447d24491770b9_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion
MessageBoxA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE