@@Common@Finalize
@@Common@Initialize
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
538d0325b8aaf6333c2530c51b1afdc2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
538d0325b8aaf6333c2530c51b1afdc2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
538d0325b8aaf6333c2530c51b1afdc2_JaffaCakes118
Size
456KB
MD5
538d0325b8aaf6333c2530c51b1afdc2
SHA1
73afdda5a929502ff7abf2d98ac6cbb52cbf6f2d
SHA256
67bb14c6e2e1f02e923b7b040b56bd60cbc68b182b93368650469615f3cc91cb
SHA512
f6f78ed6f58ab6c018ce22f6c8dfaefe6e9df9b05e1f879f39381ff59fd4e9b5ff0cb0d073c3c1d4feb1a4e2df8b6aa702ddba10b3a8f546a76f38b2a80b24e5
SSDEEP
12288:OB8Y9X/0UJpJDXuu8++cJuyZekMKYnEBY08dgUe:OV9vXJpJKP7cJekMF
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
538d0325b8aaf6333c2530c51b1afdc2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Common@Finalize
@@Common@Initialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE