DeCrypt
EnCrypt
Behavioral task
behavioral1
Sample
Crypt.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Crypt.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
WPA_Kill.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
WPA_Kill.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
��������.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
��������.url
Resource
win10v2004-20240226-en
Target
b101c6b1c7c14deb0ce3dd21f090b402_JaffaCakes118
Size
45KB
MD5
b101c6b1c7c14deb0ce3dd21f090b402
SHA1
e25d5568d501016cbd8664a47ec0b069c403cb92
SHA256
1b05a86c7166523706323d21499eaadbb71f0b034fc0856455b1aa9965791d16
SHA512
4c4dfc974a9748ea576010cf29b92c4766a821e0e04ef3b55e5a019e24e8798f3f1482665235c8b1e47022a2d8b2378c95b4c4ba7307f26c9ef8433ea0663ca1
SSDEEP
768:lYsjKxM1wX0ptvDpAaNIo1ynrqZh3oga/I7mssA7K67IZGBHm+gZKmwCYX7EdRTU:llX120fK4buGZh3oXIqstbIZv+gZ0IRg
resource | yara_rule |
---|---|
static1/unpack001/WPA_Kill.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Crypt.dll |
unpack001/WPA_Kill.exe |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeCrypt
EnCrypt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ