__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
051a83fb8fde9151c089a049e8053e33_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
051a83fb8fde9151c089a049e8053e33_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
051a83fb8fde9151c089a049e8053e33_JaffaCakes118
Size
362KB
MD5
051a83fb8fde9151c089a049e8053e33
SHA1
9c43b5a567055f7a77eca4db5241616017a5fa96
SHA256
ea814b81562b921659288a75f45daf329aa7659c12d72c0f2517a00105ffeadd
SHA512
aacd7306e1251b94f3e2afb40f13283f70a5403a61092d61cd9c9ff3f642488de2fb059c48f7cd9b26da50d9ecffc4a72bfdbee707dcc6c7fa99bc8e6814be55
SSDEEP
6144:QxMICVqD0wy1OnBBO83+2eryAp2+VltEU9oBfW1fKrgA3bYstJZUH2HKd:n/ZGBP+DWQKUCBfW1fygItnUWY
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
051a83fb8fde9151c089a049e8053e33_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE