___CPPdebugHook
kwfolur
Static task
static1
Behavioral task
behavioral1
Sample
164d9ad8334e2448967ad4aaf622e723_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
164d9ad8334e2448967ad4aaf622e723_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
164d9ad8334e2448967ad4aaf622e723_JaffaCakes118
Size
237KB
MD5
164d9ad8334e2448967ad4aaf622e723
SHA1
e9517e702001921e740ddb634e3fdcd2145838d0
SHA256
a4803fe022810ee7ccce8c3cfa36a3ad3cd860025836656105733432ff0c4b2a
SHA512
1aa536a1210315bb62315c39bdd6bcbb6d6d7c7c4250c153bc0d6d68bd55072635df83210d5a6c47c14772c1df22db8228e28295d4708fe3ada5123d4c3fd58f
SSDEEP
1536:/6NmMBMBKw1ocbCzcT7ZAEPUBe1YWklnJh+HkirKtCugAx5C547zCrG8GpwkF2k:/01B7XcbCk+e10JTsKtP5w47zhwkF2k
Checks for missing Authenticode signature.
resource |
---|
164d9ad8334e2448967ad4aaf622e723_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseHandle
CreateFileA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FindFirstFileA
FindNextFileA
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
Process32First
Process32Next
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrlenA
GetFileVersionInfoA
GetFileVersionInfoSizeA
closesocket
gethostbyname
htons
setsockopt
CharLowerA
EnumThreadWindows
MessageBoxA
wsprintfA
___CPPdebugHook
kwfolur
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ