__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
30571a3d3dbc62e76e4bceb3b3a844ed_JaffaCakes118.exe
Resource
win7-20241010-en
Target
30571a3d3dbc62e76e4bceb3b3a844ed_JaffaCakes118
Size
14KB
MD5
30571a3d3dbc62e76e4bceb3b3a844ed
SHA1
43bd46f9ac9fca8f99f23202ea66b7d949de65a0
SHA256
1537007ef5997da4d20ca3677b3adc30ad32b2d9a07b5a025938001dbcf2414e
SHA512
e8c09269823651835ded8edecf17e29a6b072f3d89cab994a87f91f361ac5ddbbbfffc44930088ddcd773058561e2db4925b8074ba68e62e7369cae27f20bc52
SSDEEP
192:0i3+hRchWBIO/FeIc+8T+EOsvDSnu/wq00tnXdUPOuH8z:p3+6AhIIcJTFtb/w905XOPOuH8z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
30571a3d3dbc62e76e4bceb3b3a844ed_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ