__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
035f0f21c86d8aaef3c05e46fee04671_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
035f0f21c86d8aaef3c05e46fee04671_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
035f0f21c86d8aaef3c05e46fee04671_JaffaCakes118
Size
71KB
MD5
035f0f21c86d8aaef3c05e46fee04671
SHA1
46ef9f57443d879e730582ed9c68ca71d564b258
SHA256
9d5d6fd29d9d501406e475a7bebeb2c77dd0c5ee7040156e55464780ddd057d0
SHA512
6ca4133908b6ae1aa4b5c893dc39ce9119671286fcfe27ab8c871fa16eb4ed1f0ed4f5b82157358d5b93b13d87c3eb9720d1f60977a68224c737d0e82349a284
SSDEEP
1536:E9IMbTgayFksLSkjQzTYzm7xtnz35qcKDWGEG4e/zBR6tICBLREMdzzzzzzzzzzv:E91QayF3mHnYgzJqcKPzBR6trBLREMd3
Checks for missing Authenticode signature.
resource |
---|
035f0f21c86d8aaef3c05e46fee04671_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
CharUpperBuffA
EnumThreadWindows
MessageBoxA
UnregisterHotKey
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ