__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
1b3a73ec24d2fc311be6133c67145364_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b3a73ec24d2fc311be6133c67145364_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
1b3a73ec24d2fc311be6133c67145364_JaffaCakes118
Size
244KB
MD5
1b3a73ec24d2fc311be6133c67145364
SHA1
f55e21db1794bac2de92cd62c6a6ba771b0bfe4c
SHA256
3061b9b9387a4a7094a5cccba44faffc0496f3e3a0a5dd9a217009ee7bf14c6c
SHA512
4623c9a607b6f051fbd17caa1d555c3bd9f071ea94bb43d95d26653b28cddef605b3ca9f662686ba447b2caf368ddcdd534218591e756a69e9b26091f4214657
SSDEEP
3072:ddAnqVpuChVxO2uc/7I5N+4lyIIg0vmrT849DF0KyaZPCow3/VgfLip:d+4uChVxOch8mg0urT8OG9V+Lip
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1b3a73ec24d2fc311be6133c67145364_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE