__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
4c87019e359ad6679c23485a9463dc66_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c87019e359ad6679c23485a9463dc66_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4c87019e359ad6679c23485a9463dc66_JaffaCakes118
Size
94KB
MD5
4c87019e359ad6679c23485a9463dc66
SHA1
a6ae4aaefdb7d75a10dd36cfb06cc37955d21cff
SHA256
a748320d640723fab2b7561ec071846ac317d0da70f9835b9f3f3fc97c1db718
SHA512
d5976164833ff0f0117d3b7a5f6dcfab1a47beb3df1adabd1031824401f50394ba2d64d1a5b902052d43e2920a289b3516545bf021654b4143b257c39dbb57e2
SSDEEP
1536:0MREEI2TevpKJ2EqLLJMHEOXdmQweUlGmlku5yONr:0oz8nJMkOYlGE7y+
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
4c87019e359ad6679c23485a9463dc66_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE