__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
24c226a14d890af76a22c14a68b80ca4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24c226a14d890af76a22c14a68b80ca4_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
24c226a14d890af76a22c14a68b80ca4_JaffaCakes118
Size
196KB
MD5
24c226a14d890af76a22c14a68b80ca4
SHA1
2dfc560007b578f47a5798d6879ce3295a9a7845
SHA256
e046e5edeefdeccf706fe3983959cfdbf64f6633e4005fd4d2388c8843811f10
SHA512
16fdbeb926b0764cf71f7e027231622a01cb5a6573dca04705948472f2030ffaff4edb2d75ec0f30148a9b7140c861436269c2b18697cc7e1123468c011d93c7
SSDEEP
3072:LVDe71s+ugVLSokc1+FumUFD6K4bopd54LroLWxI/EaZPoD:LVau+ugVLS3UBsboT54LcqxI/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
24c226a14d890af76a22c14a68b80ca4_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE