__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
aaff77bb747ccc1ea325e41a05d0d91c_JaffaCakes118.exe
Resource
win7-20240708-en
Target
aaff77bb747ccc1ea325e41a05d0d91c_JaffaCakes118
Size
144KB
MD5
aaff77bb747ccc1ea325e41a05d0d91c
SHA1
354a108c7e68aec44eb80725b098236e56bfc043
SHA256
d0a389a5c10ddaf0be677be524c807b091dcf4cd10cfe4c18ac6f829d1b0496b
SHA512
598ccf779c86f1225c8f29ca6f97107d8b3dad69f45b1f4cccf82c8cd412740aad116bfb2cf503804e1e19a8865022328e4c2f49d256f51210130b93acf51b5c
SSDEEP
3072:f6nbl+idV6c0SQpsPaJCiA65/18fi3LnJkUJoQ+m8I9AI8OG:CZ+W70SQ+yJCiN18fi3bu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aaff77bb747ccc1ea325e41a05d0d91c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ