_MyFunc1@4
_MyFunc2@12
Behavioral task
behavioral1
Sample
090825b51b1c9c88cce0f5e0b5436f8a_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
090825b51b1c9c88cce0f5e0b5436f8a_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
090825b51b1c9c88cce0f5e0b5436f8a_JaffaCakes118
Size
126KB
MD5
090825b51b1c9c88cce0f5e0b5436f8a
SHA1
8699b3bf9580dd7fb97cf661e42931ccf0702b09
SHA256
453375371a20efae3ac33601b2876e19d00b0d9cc5f77ba137c596fcbc872dec
SHA512
9b3f15cb5de570d4304b0bb27fa153e5bcfc9d4a0a192e8c670cdbc74a6c177e911888dc2b002da7372e0276ced43277658e1f7c8459d32a619e694fb9269d8b
SSDEEP
3072:35B3EdmqwLpHIPugFyZYqNsdmEQbDvNC3JeuGJk61F6U:pB0dmJCWgFyZYHmfDVC5+JiU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
090825b51b1c9c88cce0f5e0b5436f8a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_MyFunc1@4
_MyFunc2@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ