@RWinSocket@DispatchProc$qqsp6HWND__uiuil
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
0af6fa7160bd01088bf9c096201f81b3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0af6fa7160bd01088bf9c096201f81b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0af6fa7160bd01088bf9c096201f81b3_JaffaCakes118
Size
660KB
MD5
0af6fa7160bd01088bf9c096201f81b3
SHA1
d4e7bd82f9303141d79fa764968cdbfe05e1736d
SHA256
06437c83a546276cbd1e03ccb93b80b68adb0fc3f621ecd598e54da47afd29f3
SHA512
094150e23f285320312bd756496bb9f6c7552933dab0e9d462d84deb872e4349539f44a1228f4e710a81809e103a698515e3c3192e99c3477c5769b4fb6deaaa
SSDEEP
12288:r2xGOLulo7U5+j6AJxtp4Fkl5QFBSxsoN41UQ4hAouEUQhV:aGOaIvj6oxhl5QHoNnAouEF
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
0af6fa7160bd01088bf9c096201f81b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@RWinSocket@DispatchProc$qqsp6HWND__uiuil
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE