__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
a6e1481d001370f5a46f54fe2b5ae797_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6e1481d001370f5a46f54fe2b5ae797_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a6e1481d001370f5a46f54fe2b5ae797_JaffaCakes118
Size
79KB
MD5
a6e1481d001370f5a46f54fe2b5ae797
SHA1
8a15c3458bb1faeb6a225de271c341e4a0de8b03
SHA256
9ffe3253c97fdae4eb27ab6e3cfb7fc7c370af39fa7cbcd1a41f00f234a4cd05
SHA512
56b38e52ac83c8755dd00256b4a17a8bdc3cd4e963195535bb332e9afb45f6b2425e9a7c380e0efde515f0b60ed55e59a72df04449bb0077e107de6cdf90271b
SSDEEP
1536:LZSGaSC3YiNr2HAV8YyclG5o9/vNeeDz03AjHPl2TkrZYkMvGK:xCoiJLlvIxqvlYcM
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
a6e1481d001370f5a46f54fe2b5ae797_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE