__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
21e5cee8a4995e508b9df98931d255c3_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21e5cee8a4995e508b9df98931d255c3_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
21e5cee8a4995e508b9df98931d255c3_JaffaCakes118
Size
68KB
MD5
21e5cee8a4995e508b9df98931d255c3
SHA1
eb83cabe727cb02588d7f2dfabd8594088b39c67
SHA256
08d6480eeed87672e4fe45bc84459d824cf624b03907194aa6332c478adbedf2
SHA512
accba66b6131c687085c8055de802a59ed18d9767ec64ee8406787f57267ee64deb19bcd93232657e713072835b7dbd6dfcfcd69b916b46319c95cd9211190f1
SSDEEP
768:X0ljo5QJJ4gP5UHm866IauTJYL796ZMenMaBd87TGSHpxUja5znHid/zPqrUu8tc:kljGQVPmC6IhTo6+f+talwJKeL
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
21e5cee8a4995e508b9df98931d255c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE