__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
3db1a5ea6097d9f3f031e707524eaffb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3db1a5ea6097d9f3f031e707524eaffb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3db1a5ea6097d9f3f031e707524eaffb_JaffaCakes118
Size
106KB
MD5
3db1a5ea6097d9f3f031e707524eaffb
SHA1
31bdcb78e768143c996d276ddabd1f116b040a94
SHA256
fa47a88d6706d315ae9ce9708276a23440405b264e71597202c54d1b02c039c7
SHA512
0df54140ea0cfba4989d00ce5f058a3d2fd849b4b18e0ac62ed7a8f3f3d5c311507daad3e263b7c8ed732e9cc0a9baaa212c1fa93a7735a80b1e323f54d388e7
SSDEEP
3072:2P+UJNmj08glM0K3soWJjcVpov5kKaLg3k:Q+MNe09G0K3UjcVGv5kKWg3
Checks for missing Authenticode signature.
resource |
---|
3db1a5ea6097d9f3f031e707524eaffb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CloseHandle
CopyFileW
CreateFileA
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
lstrcmpA
CharNextExA
CopyRect
DdeConnectList
DdeCreateStringHandleA
DdeCreateStringHandleW
DefMDIChildProcW
DefWindowProcA
DispatchMessageA
EnumDesktopWindows
EnumThreadWindows
FillRect
FlashWindow
GetClientRect
GetClipboardSequenceNumber
GetMenuInfo
GetPriorityClipboardFormat
GetPropW
GetTopWindow
GetWindowLongA
IsIconic
LoadKeyboardLayoutW
LoadMenuA
MapVirtualKeyA
MessageBoxA
RegisterClassA
RegisterClassW
ScrollWindowEx
SetMenuDefaultItem
SetWindowPlacement
SetWindowsHookExW
UnregisterHotKey
WindowFromDC
WindowFromPoint
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE