@__lockDebuggerData$qv
@__unlockDebuggerData$qv
WEP
__DebuggerHookData
Static task
static1
Behavioral task
behavioral1
Sample
14bdf6fc0169d6126bde9ff2c980b04e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
14bdf6fc0169d6126bde9ff2c980b04e_JaffaCakes118
Size
177KB
MD5
14bdf6fc0169d6126bde9ff2c980b04e
SHA1
d24047604e8dae044e18a466b39304013d90d1e6
SHA256
75cd95e7377c82f350101c702e44733d59a02bb56594fe7ede26990b33948314
SHA512
73b8b90a3b299cbee3346e6ed67329a76edea44bf98d0964e055855cbae801991291335606c4fad50dfe74d8ada001ae342786697257e91e1e207255e6e2cda6
SSDEEP
3072:V38DFxj9wHC/d7VLMTfWHom1T9VFyxON14t3zBnl5Fx/Yd1Zbafyue5O:V38DFxj6+OxNpl5Fx/01taDes
Checks for missing Authenticode signature.
resource |
---|
14bdf6fc0169d6126bde9ff2c980b04e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetVersionExA
EnterCriticalSection
CloseHandle
FreeEnvironmentStringsA
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
CreateFileA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetFileAttributesA
ExitProcess
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile
GetVersion
MessageBoxA
EnumThreadWindows
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
WEP
__DebuggerHookData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE