__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
2f89fd92fa1b59d6577eee7282acaa7f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f89fd92fa1b59d6577eee7282acaa7f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2f89fd92fa1b59d6577eee7282acaa7f_JaffaCakes118
Size
196KB
MD5
2f89fd92fa1b59d6577eee7282acaa7f
SHA1
31cac8df911d42e8fe72dc03c4237403402bb1bb
SHA256
c9cca582bc55e6879fa6c98d6495c7a4c2e23b646ef5246d1322e172ea375f68
SHA512
1c64760ff9a85a400e5bc0cea740b9efd483fbe117a49fefd1d47248fe42ae209fdee46a4c865886d7dd149cc7c94e7dd18638459cab96e0c050516957317dd3
SSDEEP
3072:VaV3h3VB4iZMuCpv6/pSLOcZCcLmF+8ou941MpdAqZcBfyKTv6QoqQl:IVR3VpZXdcZVz8soSqiB5OQo
Checks for missing Authenticode signature.
resource |
---|
2f89fd92fa1b59d6577eee7282acaa7f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
RegCloseKey
RegCreateKeyA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CloseHandle
CreateFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
socket
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ