__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
0e48eec4a7091c4d2774b166c12f8b5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e48eec4a7091c4d2774b166c12f8b5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0e48eec4a7091c4d2774b166c12f8b5a_JaffaCakes118
Size
62KB
MD5
0e48eec4a7091c4d2774b166c12f8b5a
SHA1
02409bcc11d6886d5727e273b81f68cb03b6d363
SHA256
c9a2fa513ee38e1b8108867c1b2769218f79506f7a3d464a7bb8141267a2e0b8
SHA512
5d6d2b78f98cab9029fa154c426a8ac6d88ecdb6d89676ddae93e0c201f722fa5d10a6c2d69cdb8dbe822d88ba31735fb31148c95bbb8a169db26839b1d8fa4b
SSDEEP
1536:6eFSVG0vWYe9IB10x8aM3DCE/THRK9WGCUR:yGMEiB102rP/+bR
Checks for missing Authenticode signature.
resource |
---|
0e48eec4a7091c4d2774b166c12f8b5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
RegCloseKey
CharNextA
SafeArrayCreate
URLDownloadToFileA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE