__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
71c3fcd4ab6ddb960f08f0919e901a2e_JaffaCakes118.exe
Resource
win7-20240704-en
Target
71c3fcd4ab6ddb960f08f0919e901a2e_JaffaCakes118
Size
436KB
MD5
71c3fcd4ab6ddb960f08f0919e901a2e
SHA1
8419ea670409fb708597b6ed9796235d23cc869a
SHA256
44e81175191d3438326b6bd480d20ababaaed2634b6fe492ca47cbfdd7e1dc27
SHA512
78a25b2a20dfcc4951dfaee6c849567824d7cd8df73ecb0b5110fc3bb63b705b30d040bf4631c6d0a9fd1888a8b64d65fa601ccab5c915f02e96350dc0620df9
SSDEEP
6144:g8BEdST00kkuViBKf2DHaJGHrIr1fjSridNnbCP0lpBrlTqqtmtY1qqp5:VqdqIiR4IOrVGP0lp7eqcI
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
71c3fcd4ab6ddb960f08f0919e901a2e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE