@RWinSocket@DispatchProc$qqsp6HWND__uiuil
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
457fb3ab2df58df1bafb9112f3cceaf7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
457fb3ab2df58df1bafb9112f3cceaf7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
457fb3ab2df58df1bafb9112f3cceaf7_JaffaCakes118
Size
710KB
MD5
457fb3ab2df58df1bafb9112f3cceaf7
SHA1
e9d8ea4192c13995c3510c1c69e61332dca5941f
SHA256
f6dd91f9e1dd503cb5b45fc9f2833ee8687f89d8bb04cab2d25fc70b3e6716ad
SHA512
a523f945e27f9dde71d26665e1f2f87de1e2c5b44041c56058780452dba9adb2bb13a6f9fe80be4ac68afc60d3a9c6e51a2abad38250b444e79444d37decebd7
SSDEEP
12288:cR7oiy9fc9tTOKZyiJEy1hH4Rp0aCN0ck6TET+4tx5wsDxoUXtPmV3uxKfuFB4H7:E7fuc9dOKZyiJEy1hH4RG5Pk/K4txCsF
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
457fb3ab2df58df1bafb9112f3cceaf7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@RWinSocket@DispatchProc$qqsp6HWND__uiuil
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE