__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
481f940b09df1d52c2a766ae5c838ced_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
481f940b09df1d52c2a766ae5c838ced_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
481f940b09df1d52c2a766ae5c838ced_JaffaCakes118
Size
161KB
MD5
481f940b09df1d52c2a766ae5c838ced
SHA1
6a2afc169d8c613d50923aca0972e49c2e032259
SHA256
538b74b598bc5fcc242707af9f0afa7d33cf2ab7bf0c5a87218bc6096a0e4565
SHA512
79cfbac64782976c67bc63dcf61d37ba225390ef854b9507195ba30102ac5da9023534f7a582eb96b0015efc4af624f752e1ca25e90e397b625b0d28e5832b94
SSDEEP
3072:P7ueG9ErYsU+AcI2rv3bo7MnTqtQdhZA/njt:P7uF9ErUeI2rfdqtQXe/p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
481f940b09df1d52c2a766ae5c838ced_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE