@@Main@Finalize
@@Main@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_frmMain
Behavioral task
behavioral1
Sample
2845240d4e10f94465369c1b0a956164_JaffaCakes118.exe
Resource
win7-20240705-en
Target
2845240d4e10f94465369c1b0a956164_JaffaCakes118
Size
940KB
MD5
2845240d4e10f94465369c1b0a956164
SHA1
b138c5f9b5983f0450cc85549863c8c84d647ca6
SHA256
0a1e1b8b1199ffba4af7f4bed3c794901d7013dc54d8887a36f7a7d09abb996b
SHA512
d390946ac2f67d599e52b796669b604a6a6a0452e5d37695d1b44b7b801c8f700f082d9776a244147b34f8809178e5edd1ebfa0b38fbe13e14daac5ee56f1da8
SSDEEP
24576:2W4q+WGhtyqhLBOsuEi3ELPcMd2/y+529mzgn:TG6q5rhn
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
2845240d4e10f94465369c1b0a956164_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Main@Finalize
@@Main@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_frmMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE