@@Main@Finalize
@@Main@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_oshcod5
Behavioral task
behavioral1
Sample
SchoolHackCoD5Multi.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
SchoolHackCoD5Multi.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
visit www.oldschoolhack.de.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
visit www.oldschoolhack.de.url
Resource
win10v2004-20240802-en
Target
164285c2f429a8fc62be0cf688fd75c6_JaffaCakes118
Size
241KB
MD5
164285c2f429a8fc62be0cf688fd75c6
SHA1
db65964bbd0b202586814d51b9f20d05cfd14746
SHA256
d9e0b4b48cdeb491085ec30e137e56849ba58b5928ddcaaf10f35bd400d4cf46
SHA512
2f343dfaa54543fe3f6bd7de453955ccb4cec86905bb2e45a4395a496cf7ac29f515a1cba90fc304bdb1d354479559020738e6c135db78b3dbeb4d53705a679c
SSDEEP
6144:ySlGd1ScRMsV+ca4L+VUVkcWTMa7pO2F/W9vhYJ7Q1P5t1Ak:ySlGd1ScisPaEGw5uO2F/W7YU1xt1J
resource | yara_rule |
---|---|
static1/unpack001/SchoolHackCoD5Multi.exe | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
unpack001/SchoolHackCoD5Multi.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Main@Finalize
@@Main@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_oshcod5
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE