__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
2dd3a78c79a8fdd9e93d8a263c6d6070_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2dd3a78c79a8fdd9e93d8a263c6d6070_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
2dd3a78c79a8fdd9e93d8a263c6d6070_JaffaCakes118
Size
80KB
MD5
2dd3a78c79a8fdd9e93d8a263c6d6070
SHA1
c7a07d90a17b7decb17d2a665cf6a7038dbe805d
SHA256
137c98899c67d440e4b8ba8d86c06330344758bf96fda146f2c6d4f911bf2aa3
SHA512
4cc485850956e02fac7bed04506b293241c022c7f2e5dce4ce582a4381d0d7aaab0a1dfa22c39beec6dd7335fa4afc24e21f81ee30464dee823cea0fbb463d4e
SSDEEP
1536:4raYCIoXSx2F8gosX/pWLQIrdmlSGQoS8KdU6tkUxdVY3Z6Hcjh7qT:+aLBSU8gosXhxodAQeT6tJY3kHc17qT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2dd3a78c79a8fdd9e93d8a263c6d6070_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ