__GetExceptDLLinfo
___CPPdebugHook
Overview
overview
6Static
static
6idasdk68/allmake.vbs
windows7-x64
1idasdk68/allmake.vbs
windows10-2004-x64
1idasdk68/b...ake.pl
windows7-x64
3idasdk68/b...ake.pl
windows10-2004-x64
3idasdk68/bin/ld.exe
windows7-x64
1idasdk68/bin/ld.exe
windows10-2004-x64
3idasdk68/b...il.exe
windows7-x64
1idasdk68/b...il.exe
windows10-2004-x64
3idasdk68/d...d.html
windows7-x64
3idasdk68/d...d.html
windows10-2004-x64
1idasdk68/d...p.html
windows7-x64
3idasdk68/d...p.html
windows10-2004-x64
3idasdk68/d...p.html
windows7-x64
3idasdk68/d...p.html
windows10-2004-x64
3idasdk68/d...p.html
windows7-x64
3idasdk68/d...p.html
windows10-2004-x64
3idasdk68/d...p.html
windows7-x64
3idasdk68/d...p.html
windows10-2004-x64
3idasdk68/d...s.html
windows7-x64
3idasdk68/d...s.html
windows10-2004-x64
3idasdk68/d...g.html
windows7-x64
3idasdk68/d...g.html
windows10-2004-x64
3idasdk68/d...s.html
windows7-x64
3idasdk68/d...s.html
windows10-2004-x64
3idasdk68/d...t.html
windows7-x64
3idasdk68/d...t.html
windows10-2004-x64
3idasdk68/d...s.html
windows7-x64
3idasdk68/d...s.html
windows10-2004-x64
3idasdk68/d...t.html
windows7-x64
3idasdk68/d...t.html
windows10-2004-x64
3idasdk68/d...s.html
windows7-x64
3idasdk68/d...s.html
windows10-2004-x64
3Behavioral task
behavioral1
Sample
idasdk68/allmake.vbs
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
idasdk68/allmake.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
idasdk68/bin/idamake.pl
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
idasdk68/bin/idamake.pl
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
idasdk68/bin/ld.exe
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
idasdk68/bin/ld.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
idasdk68/bin/peutil.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
idasdk68/bin/peutil.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
idasdk68/doc/annotated.html
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
idasdk68/doc/annotated.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
idasdk68/doc/area_8hpp.html
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
idasdk68/doc/area_8hpp.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
idasdk68/doc/auto_8hpp.html
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
idasdk68/doc/auto_8hpp.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
idasdk68/doc/bitrange_8hpp.html
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
idasdk68/doc/bitrange_8hpp.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
idasdk68/doc/bytes_8hpp.html
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
idasdk68/doc/bytes_8hpp.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
idasdk68/doc/class__qstring-members.html
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
idasdk68/doc/class__qstring-members.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
idasdk68/doc/class__qstring.html
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
idasdk68/doc/class__qstring.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
idasdk68/doc/classabstract__graph__t-members.html
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
idasdk68/doc/classabstract__graph__t-members.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
idasdk68/doc/classabstract__graph__t.html
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
idasdk68/doc/classabstract__graph__t.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
idasdk68/doc/classareacb__t-members.html
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
idasdk68/doc/classareacb__t-members.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
idasdk68/doc/classareacb__t.html
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
idasdk68/doc/classareacb__t.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
idasdk68/doc/classareaset__t-members.html
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
idasdk68/doc/classareaset__t-members.html
Resource
win10v2004-20240802-en
Target
c01c74a360c94be3d34413edf904f61b_JaffaCakes118
Size
18.0MB
MD5
c01c74a360c94be3d34413edf904f61b
SHA1
cd19f07057780d0c3ca452a28fdb7c5fa329b61f
SHA256
c27d2f480560da3877728f17ee23660bb90b1459cfa4ccd067556ddf4dce47b4
SHA512
74229c7295662796446d91ac5064cce28b1d352a36c7dc57f800bf80735b11270c692d8361d7a64d0f7bd2099c372337e9c40e601a0b65262d6ac311591a24b9
SSDEEP
393216:HVIJ3ybnVHpp8jRqe8yGgS2ye5pd8l+qb0rC9LFYRB/l9:HV43AnyjcyfG2de+qb0MmBX
Checks for missing Authenticode signature.
resource |
---|
unpack001/idasdk68/bin/ld.exe |
unpack001/idasdk68/bin/peutil.exe |
unpack001/idasdk68/plugins/bochs/bxtest.dll |
unpack001/idasdk68/plugins/bochs/test.pe |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FormatMessageA
GetLastError
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
GetCommandLineA
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetStdHandle
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
DeleteCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStartupInfoA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
HeapSize
GetLocaleInfoA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
CreateFileA
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
SetEnvironmentVariableA
DeleteFileA
GetExitCodeProcess
CreateProcessA
GetFileAttributesA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
DeleteFileA
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
BxGetProcAddress
BxInstallSEH
BxVirtualAlloc
BxLoadLibraryA
BxUninstallSEH
VirtualAlloc
MessageBoxA
MyMessageBox
MyR0Entry
MyRoutine
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
MessageBoxA
ExitProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE