__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
3a6f0eb401d06f0292dd243894d04b1f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3a6f0eb401d06f0292dd243894d04b1f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3a6f0eb401d06f0292dd243894d04b1f_JaffaCakes118
Size
74KB
MD5
3a6f0eb401d06f0292dd243894d04b1f
SHA1
0652ca691c377c8a18627be579453a80f9b6b421
SHA256
a7a1f4a5fe9e53022f67df99baba9cea6c97d7ec71cdc27fd713f6316d023c69
SHA512
d1e7f199f05e29a4c1101db30e7d7a7ccd0638ce349907f2e3223693db2318f569fa638aad232959509f58afa060d4274c8f245d51449dcd2d5010f077109b53
SSDEEP
1536:wZqCO2BfXgTjwwy4rsp8JzEi5o0FfmGsG7rW/raJ90Qg8bdlJ4:wU2NgVnEQomlrW/cPgcdlS
Checks for missing Authenticode signature.
resource |
---|
3a6f0eb401d06f0292dd243894d04b1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CallNamedPipeA
CloseHandle
CreateFileA
DeleteTimerQueueEx
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetComputerNameW
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNamedPipeHandleStateW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetVersion
GetVersionExA
GetWindowsDirectoryW
GlobalMemoryStatus
HeapAlloc
HeapFree
IsBadWritePtr
LoadLibraryA
MulDiv
RaiseException
ReadConsoleOutputAttribute
RtlUnwind
SetCommBreak
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetVolumeMountPointW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
lstrcmpA
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE