@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
c161186b46f526988bf955149c3c7437_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c161186b46f526988bf955149c3c7437_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c161186b46f526988bf955149c3c7437_JaffaCakes118
Size
121KB
MD5
c161186b46f526988bf955149c3c7437
SHA1
50a4bad75a941391c5e768b718174d1158ac2935
SHA256
d55463c6635f7553ec33e9214aa706676b0cccdbc16ceeac0512936492162783
SHA512
0204521586f9c5e9124c51703d8498988f073d3c89c854ae00c45cda71146d38ae6a5efd36edf781d43478703874f9b7d3f5688c29e5bdc3b650373cf6bf3793
SSDEEP
3072:jg1fqW24QG9wy40rcqyIxmxY26VFpQ7hTOLBVSL:jeS3Y9R+qSe5VFMOa
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
c161186b46f526988bf955149c3c7437_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE