?SUB_CallUseToggle@CBaseEntity@@QAEXXZ
CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
b8ebdac21c15616db4b931775c638085_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b8ebdac21c15616db4b931775c638085_JaffaCakes118
Size
212KB
MD5
b8ebdac21c15616db4b931775c638085
SHA1
e4f928206124c2585c1daad21bda26116d57ae38
SHA256
b1fd0bc5b4eae803257491f3c988e78dcec763630a5a07f74e233ba96a640071
SHA512
b647a9f012a3768318d073ef552ec28c6c56b8eea5877d9e69ceb5071e0bb015cf3dd28bc7e36553e7a6a9d2139a089f234d6be0a7e6ef967a97cc69d773a06a
SSDEEP
3072:SbBEhdhLB0knIovywOS8DD8RAenjlGvLKFhK+hHnO+nQOtsL25QdZr9S:SbBGdhLB0vDqn5ALmM+hHtQjSEZ5S
Checks for missing Authenticode signature.
resource |
---|
b8ebdac21c15616db4b931775c638085_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleHandleA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle
?SUB_CallUseToggle@CBaseEntity@@QAEXXZ
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE