__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
079027ff87cd3fb75cb33171788117cb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
079027ff87cd3fb75cb33171788117cb_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
079027ff87cd3fb75cb33171788117cb_JaffaCakes118
Size
80KB
MD5
079027ff87cd3fb75cb33171788117cb
SHA1
b7a3c3c9d788c10d298e073e58508e75c85225cc
SHA256
d1793a7c5be03caaa410e13ffdb2d65229bedb0134d3a0aea66a9f05ec462cac
SHA512
007fc2c2dbe58061d87ca4561a68c099a9c1561b10472dfa7ff55429151a15f928f28265ee18605ee9ac105ab03e990d03d972f02389aeaac4a662bb3783faf8
SSDEEP
1536:hsJ4g7YF/fAru564lLlGWpzNDhWXTqIPWeDW/pboXl+v5BfIsUe1p:i4g7gn1pC5P/DuWl+v7IsUeL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
079027ff87cd3fb75cb33171788117cb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ