@@Rydfc@Finalize
@@Rydfc@Initialize
@@Rypasswords@Finalize
@@Rypasswords@Initialize
@@Rypersiioctrl@Finalize
@@Rypersiioctrl@Initialize
@@Ryprivilege@Finalize
@@Ryprivilege@Initialize
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
693e5126312fd4b7b69b62fea22345d8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
693e5126312fd4b7b69b62fea22345d8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
693e5126312fd4b7b69b62fea22345d8_JaffaCakes118
Size
159KB
MD5
693e5126312fd4b7b69b62fea22345d8
SHA1
80b7ea4563bf695c7e7394edbc5033542a688c0d
SHA256
d30e2fa010d062f3a826333b78bcb64791cd0971e6057b538b71c671c2737a5d
SHA512
ab7f6d8429f9cd745a37bab5e150248cd248b711570b5b96baf8af6bf6a11a165be70d9aca8f79012a5a4f838e8f6c6aff8c88156ee918dc926b2b446d582982
SSDEEP
3072:Z1j4TOkFkrOAz0znOQbwhQW8UvVLI0AdHbKlnNB/l4dvI38kaA:Z1j4ikarOZTsQTCVLVcbU/B38A
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
693e5126312fd4b7b69b62fea22345d8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@@Rydfc@Finalize
@@Rydfc@Initialize
@@Rypasswords@Finalize
@@Rypasswords@Initialize
@@Rypersiioctrl@Finalize
@@Rypersiioctrl@Initialize
@@Ryprivilege@Finalize
@@Ryprivilege@Initialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE