__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
3e8992d8c5004f040f624c73bfc4fa1d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e8992d8c5004f040f624c73bfc4fa1d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3e8992d8c5004f040f624c73bfc4fa1d_JaffaCakes118
Size
185KB
MD5
3e8992d8c5004f040f624c73bfc4fa1d
SHA1
2b7d49ddd886ca22f1006dddda078bf971bc0478
SHA256
8639a40228dd3500830ff93d80c89fb001f3272f65c85fe828afab52a199e7f8
SHA512
a353d3014ab70292c4462037d6d2f190166fd918405ae03f60985deab06585be4b90d297d8a9187cb1abe717b9ec52e4af9e22270a0538d514603813f5e09b7c
SSDEEP
3072:P7ueG9ErYsU+AcI2rv3bo7MnTqtQdhZHcP6O+yrfxq:P7uF9ErUeI2rfdqtQXFcP6OZq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e8992d8c5004f040f624c73bfc4fa1d_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE