__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
45e3aa9dbe16219c79b056493f54b823_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45e3aa9dbe16219c79b056493f54b823_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
45e3aa9dbe16219c79b056493f54b823_JaffaCakes118
Size
459KB
MD5
45e3aa9dbe16219c79b056493f54b823
SHA1
5b6bb93d802a89c5ad0cee4c4198e88697dd6900
SHA256
6a9f82ced38ee9ef1eea8d9e895807a4ed5e7e921a5fad093d503de03eab9046
SHA512
6f3b1f6bb69f98de6fa44e9a363b1b1ddfb60509bb28bf6497153611a5ea6fd9c02a76b15c1e4ace1cfa28455b5719da64ad3e8c04f1a2f7e737e8f57a93ce97
SSDEEP
12288:cUg0Dkfs5RUfMWwoy6/sGBkMtlq7KWulGAB:cUafoR160GBu7KlG
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
45e3aa9dbe16219c79b056493f54b823_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE