TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
f535697c0531b0e89d563a7aac1620bc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f535697c0531b0e89d563a7aac1620bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f535697c0531b0e89d563a7aac1620bc_JaffaCakes118
Size
5.4MB
MD5
f535697c0531b0e89d563a7aac1620bc
SHA1
8308d89c20220c241013dee5bda189847bd6d1d4
SHA256
d8175993bce09eb78b9d93372fcf5f67f06841bef37c8a7471b27c8751355fe2
SHA512
a95645117684521149f622428a29495039a6ee18f8e792e732926a1ba107c27e6ba6ec195039e9434aff88cc901169a7b899cd3c72502945599d8f8818eb4fd7
SSDEEP
98304:UaTqMO0V3cqQUQgQKCGlIpvQS+BVAKuG4kD+v1x8sk+4SZiNxjp5+0POAVslUx5D:UaTxpV3c3UxGQRvL4lv1me4NVp5J2Wn
Checks for missing Authenticode signature.
resource |
---|
f535697c0531b0e89d563a7aac1620bc_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Direct3DCreate9
DeleteUrlCacheEntryW
DocumentPropertiesW
ImageList_GetImageInfo
SHGetMalloc
URLDownloadToFileW
MoveWindow
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetFileVersionInfoSizeW
SysFreeString
RegSetValueExW
NetWkstaGetInfo
memcpy
D3DXVec3Project
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
IsEqualGUID
Pie
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ