__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
2ab074c906bf7f05d09b66184de08036_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ab074c906bf7f05d09b66184de08036_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2ab074c906bf7f05d09b66184de08036_JaffaCakes118
Size
243KB
MD5
2ab074c906bf7f05d09b66184de08036
SHA1
bd44a30a081b831dd35ee056ddc3e21407672b35
SHA256
4870abddf42bdc6711a0ceb6b7a185a392b4ae15a03c231fb7d4805d423b80dc
SHA512
9f9c60e0f7fd621a6b99916a20909c7efc2f7f31bed814bb846881a480e46921be6f579d128390ccce73c3236a2a5e6002262ede7aafac21bdf5bca4279d2203
SSDEEP
6144:P7uF9ErUeI2rfdqtQXtlO/hjwQjPlB5+3gYKgr:D3rjCQXXIxPt+317r
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ab074c906bf7f05d09b66184de08036_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE