__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
1778e0aa2c5f17a99b92b88a8f6b4c1b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1778e0aa2c5f17a99b92b88a8f6b4c1b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
1778e0aa2c5f17a99b92b88a8f6b4c1b_JaffaCakes118
Size
73KB
MD5
1778e0aa2c5f17a99b92b88a8f6b4c1b
SHA1
146edd9da3632097e74cc9e9ada3321069e298b1
SHA256
fdc2a0540f5282044fd9b0ee97dd3f52d75f5728a488f02e4eb9411c06d8ad4d
SHA512
35b8b404bde3f53adbda78cd354995b0c8a460384ad4116541f6389d8a09c7a342325d71bd862c4eb7eb21ed4ea19db59379f62602f4b76b6a8803eb67da6c1b
SSDEEP
1536:E9IMbTgayFksLSkjQzTYzm7xtnz35qcKDWGEG4e/zBR6tICBLREMdzzzzzzzzzzy:E91QayF3mHnYgzJqcKPzBR6trBLREMdq
Checks for missing Authenticode signature.
resource |
---|
1778e0aa2c5f17a99b92b88a8f6b4c1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CreateFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
CharUpperBuffA
EnumThreadWindows
MessageBoxA
UnregisterHotKey
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ