___CPPdebugHook
z
Static task
static1
Behavioral task
behavioral1
Sample
0387a525ff56ad1213af5a9618238144_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0387a525ff56ad1213af5a9618238144_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
0387a525ff56ad1213af5a9618238144_JaffaCakes118
Size
236KB
MD5
0387a525ff56ad1213af5a9618238144
SHA1
5374a2b99b779fc15f92abadb1f96abc1137da8d
SHA256
6118c2ae04ca550d490e8e8530e9e77ba19dece870f7c889f23d3b37b8e445de
SHA512
2e8b14ddd46a2cee290aa5dde3e853485f92116f098722d0e840f1fd785165faf289a8c1b104b628d4f95b725818f497718251428585036477003544a81b8da2
SSDEEP
1536:1dKaTHN2ymZ0ofa5uQm4V7HG8ldINh+RhFtFftCgpcGO5lPf/XG8GmGwktbs:1Y4tIQG8XAmbFfaGc1fawk1s
Checks for missing Authenticode signature.
resource |
---|
0387a525ff56ad1213af5a9618238144_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseHandle
CreateFileA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
Process32First
Process32Next
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrlenA
GetFileVersionInfoA
GetFileVersionInfoSizeA
closesocket
gethostbyname
htons
setsockopt
CharLowerA
EnumThreadWindows
MessageBoxA
wsprintfA
___CPPdebugHook
z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ