__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
b7be75fce08a7da269c68916e6c67d25_JaffaCakes118.exe
Resource
win7-20240704-en
Target
b7be75fce08a7da269c68916e6c67d25_JaffaCakes118
Size
391KB
MD5
b7be75fce08a7da269c68916e6c67d25
SHA1
b37d161e6dd9c51a2f9960187e12cbee85fdaf22
SHA256
ac98dd3a83f318fd3b02ab56db67f0eec611284b7da532d46191835268254968
SHA512
25d01313a7bdd960250b79628344c480b8cbe11ccfd7dae5503fcb5ba77954ff3a425f3c084a840c5fa221bf9c008d6bd69eef654f58988e53a90f7cd76623d3
SSDEEP
6144:L30kQn1BRy+MxjWJ/G4HJBlIm+2PgOs0mqFEebdb67ttKKLBqpRWUpKydOqu8dn:L3HQ1B6xCflImTI1MFEjJtkpRfdv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7be75fce08a7da269c68916e6c67d25_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ