__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
15af7cbae9100b36a7f2735c1937ebe2_JaffaCakes118.exe
Resource
win7-20240903-en
Target
15af7cbae9100b36a7f2735c1937ebe2_JaffaCakes118
Size
331KB
MD5
15af7cbae9100b36a7f2735c1937ebe2
SHA1
852b15eb1d89902c71416c721ee6b4cdb8805958
SHA256
a40626110086d3924a16b7785f0b54027cbbddb8307ca1f962afdc7f24019cbe
SHA512
89eb331de71bdff5ee340b69be53bedc4fa4d9a0b53a56dd55eea2a82ede266f803a8ceb4b6f62b18a84cca39d35230b1c54a22a929c59fe98ebbbfebf986841
SSDEEP
3072:lBz3mGkVPRLwIi8kHDAQr/e0TqGkJ5s7hMEcH0mE3LuuKQGi4:lBT/kHLwZ8kHEueCqGGihMEb+QGi4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15af7cbae9100b36a7f2735c1937ebe2_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE