__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
273353b2ccbfc596176ef46b558cabd9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
273353b2ccbfc596176ef46b558cabd9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
273353b2ccbfc596176ef46b558cabd9_JaffaCakes118
Size
99KB
MD5
273353b2ccbfc596176ef46b558cabd9
SHA1
1aca37c274d95dfb97d77efe653d0a4e22f65492
SHA256
4f79e01a48b9a9ed7128e51c734041232505508b821554f016302d9fc76e597d
SHA512
3bf01c88fb4837477baf508eea8de44cf7cc2ec89715067ae55e9d3a5503c66293ecd55065c79224f6dde4ff5a668e0d4b83cda9ab61776075c5e4952c374d9b
SSDEEP
1536:rZqCO2BfXgTjwwy4rsp8JzEi5o0FfmGsG7rW/raJ90Qg8bdPIF+GGEhc8ZdrjhEF:rU2NgVnEQomlrW/cPgcdEcMEF
Checks for missing Authenticode signature.
resource |
---|
273353b2ccbfc596176ef46b558cabd9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CallNamedPipeA
CloseHandle
CreateFileA
DeleteTimerQueueEx
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetComputerNameW
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNamedPipeHandleStateW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
GetWindowsDirectoryW
GlobalMemoryStatus
HeapAlloc
HeapFree
IsBadWritePtr
LoadLibraryA
MulDiv
RaiseException
ReadConsoleOutputAttribute
RtlUnwind
SetCommBreak
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetVolumeMountPointW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
lstrcmpA
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE