__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
2a378d15b3e9c8acec12846a25cab176_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2a378d15b3e9c8acec12846a25cab176_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2a378d15b3e9c8acec12846a25cab176_JaffaCakes118
Size
124KB
MD5
2a378d15b3e9c8acec12846a25cab176
SHA1
963a5e1a0b4a98e1dcf54652f8b0df3778137f29
SHA256
dce7d572477e8a0ef2b25e7a8ff55efce0edd840a06fe0caa6a7f6f1e031ac3e
SHA512
def578bccb4823dcf3289e1aec6effdcaca99adfb4b10d67fc37a45001cfdac49b184cfcf286a6c23157ec91ce79a4210fb2a626050f00aebee2f168729c8373
SSDEEP
1536:GMREEI2Tevp62wozNdXBIqyMu5KilAU7fZBUOUEitU4yM5dnJuQFkaU5yrOsE1xQ:GoDPoRIauDaADUOdoU41DIfaQyq1DS7
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
2a378d15b3e9c8acec12846a25cab176_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE