__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
642ffa6233e754d0c723bcd857b000c1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
642ffa6233e754d0c723bcd857b000c1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
642ffa6233e754d0c723bcd857b000c1_JaffaCakes118
Size
197KB
MD5
642ffa6233e754d0c723bcd857b000c1
SHA1
cf35c897a8454ae949ccac5be6b3b9aacf093bae
SHA256
81c4be32171e9666806cbf1765fb4377a5343acd6600aec4e496160d234c7a6a
SHA512
6c6476a64b48594d6b871f3f112b5b381ad37c4d80d7234fadec5ea330657acce62b86f918b4f6dfc16770f9533ef381c0c316eb5a3bca0d7ddd8eedcfca8ceb
SSDEEP
3072:P7ueG9ErYsU+AcI2rv3bo7MnTqtQdhZJOwS+hDplVEMOKlb:P7uF9ErUeI2rfdqtQX7S+5fV0S
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
642ffa6233e754d0c723bcd857b000c1_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE