__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
02486716b767039ae89deeeb1cdd1fb9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02486716b767039ae89deeeb1cdd1fb9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
02486716b767039ae89deeeb1cdd1fb9_JaffaCakes118
Size
31KB
MD5
02486716b767039ae89deeeb1cdd1fb9
SHA1
4744f442c45cb85d2f0851cea8536d9f61c61704
SHA256
29d5d8a43ac6e42f60ccc32feebf5567a397acb3e01d93bb84766cae261c7ce1
SHA512
5f08b92ef429ca1cf735c03a318c9442dbc973ed88da9020afdd98f74f9db9c47d3cb4869ab2e166383c137ebca52c4da9875bbaea7f29d4236d573ad7e6ce9f
SSDEEP
768:Ae4pGuYKd8KojXsC47yqRxa+velCDryWGKPPex4ha5/30:AZpGuYgoZ+yqRDDrvb
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
02486716b767039ae89deeeb1cdd1fb9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE