@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
c2397d12ea895492358aabb82a698cbe_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c2397d12ea895492358aabb82a698cbe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c2397d12ea895492358aabb82a698cbe_JaffaCakes118
Size
48KB
MD5
c2397d12ea895492358aabb82a698cbe
SHA1
504276873589400bb6b3f87300221dcf78bf21fb
SHA256
69ffd36fc3b22e61af86c27d47f5192e9dcaf2084de82903a70fbec7bbb6d56b
SHA512
c11bf8e5c8ff05251b82a881a11ece88d44ed660c055070bb87ee34bd23809deafaf5f400ccf9d67230ec6f7c0fd6a0048749dd531197dbe25edd9db27012c60
SSDEEP
768:NhMfyP+9tVDfiKpFcAnzk+cVC3xxznJGtLiwpHJuGMDICW6XqL/:XR2PlfxFc+v37ncpHYGNSq
Checks for missing Authenticode signature.
resource |
---|
c2397d12ea895492358aabb82a698cbe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
WriteFile
CloseHandle
GetCommandLineA
DeleteFileA
EnterCriticalSection
ExitProcess
GetStartupInfoA
GetProcAddress
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
CreateFileA
GetCurrentThreadId
GetStdHandle
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
MoveFileA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
ECF_ReproduzirMemoriaFiscalMFD
ECF_DownloadMFD
WSAGetLastError
MessageBoxA
EnumThreadWindows
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ