@@Dubaremovecpp@Finalize
@@Dubaremovecpp@Initialize
_DUBA_REMOVE
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
073ce30f4fdab7805d6825bc19e7e404_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
073ce30f4fdab7805d6825bc19e7e404_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
073ce30f4fdab7805d6825bc19e7e404_JaffaCakes118
Size
229KB
MD5
073ce30f4fdab7805d6825bc19e7e404
SHA1
4bffea3ef1e17dcd95d85a0d09fb5cf1b9aab708
SHA256
2ddebfb04783191cc918b0def3e4fa46e7fbf7ca9da5f50b5fddd0395b9ab081
SHA512
c4d23fb5efefe87c1a5307e9591659145eae1290436456fa3ebe024d06f4f3d6e93ad718df965073c6a31079542f3c49a475ccbc32aa3434d82f3e4d0cc76131
SSDEEP
6144:4VLPoqWB8C10ZB58mHIAoQpyQf5dEaGZW:MIPQRo2fTEaG8
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
073ce30f4fdab7805d6825bc19e7e404_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Dubaremovecpp@Finalize
@@Dubaremovecpp@Initialize
_DUBA_REMOVE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE