__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
bd34b1ca10347d97053b4afd9a067840_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd34b1ca10347d97053b4afd9a067840_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bd34b1ca10347d97053b4afd9a067840_JaffaCakes118
Size
45KB
MD5
bd34b1ca10347d97053b4afd9a067840
SHA1
2d2a0d8228a996e1b9cc66e2b530e8258cbd2a84
SHA256
c830ced60599671e6b0b464f715845f31eb51c68fd66829db286b20d9077ba5f
SHA512
fc750a00e8b8028e2cdf56835930db9ebea2c7a0c6e1b336b4815cfe41c7ec433eef840c2b7af77eac34b2617c45e2c4e287c02b7e4a3d8ecdf164ba6e9133b5
SSDEEP
768:Z/52qCnC6N1TvxopebhcVIc+IbpTBGHDRn3VgOAGcGVTBL/3:Z/UqCh1Tie9cCc+optGjN3VgpGcGPr3
Checks for missing Authenticode signature.
resource |
---|
bd34b1ca10347d97053b4afd9a067840_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CloseHandle
CreateFileA
ExitProcess
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
MapViewOfFile
OpenFileMappingA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EnumThreadWindows
GetMessageA
KillTimer
MessageBoxA
PostQuitMessage
RegisterClassA
SetTimer
TranslateMessage
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE