__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
3b623ce63c84099d76dd153446dda4b4_JaffaCakes118.exe
Resource
win7-20240903-en
Target
3b623ce63c84099d76dd153446dda4b4_JaffaCakes118
Size
168KB
MD5
3b623ce63c84099d76dd153446dda4b4
SHA1
fb013e56f5f0201bfbfa1e301c7ff3a40e9a4794
SHA256
0b076a19f02be7a0122f9bf8c1bd5c4a9de99afc2ada61d0e5980749a3c71edd
SHA512
df39e59732c3c9b6d51081f81d340e49a08bf8e3aad168727c2b6a5da28a4e2750c117fc90dc590979455a78d4e9054aa23b18d86920c2638c8b9ecfadcc0137
SSDEEP
3072:U1WFfZ02Haj0hsyjvup++iRF0U4mVqh4fF7mT0GiknHxZQkujSBAYmnT5jO:qSZ02HaCfrJfF7xGVnHQksLYmT5i
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
3b623ce63c84099d76dd153446dda4b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE