MSBCompilScript
MSBPRunScript
MSBRunScript
Behavioral task
behavioral1
Sample
0e95f96d4c8e49913f6883184c1bdeb2_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e95f96d4c8e49913f6883184c1bdeb2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
0e95f96d4c8e49913f6883184c1bdeb2_JaffaCakes118
Size
721KB
MD5
0e95f96d4c8e49913f6883184c1bdeb2
SHA1
c0f16161b25591b3ac98f1b11a5809c03cc367cf
SHA256
0abe62de95ad966482f445504eb8a385afb8e4b4ba5a36ea34fce13b3da3dad2
SHA512
791415eee323e69f08bed3a5bc88ffe7067ddc5d38253d76016ade60912a60a0e9c15be691bdbbe5b76870940168fd4896c91bbb9ac8f6eb4e4c0ea291e219bc
SSDEEP
12288:2fdUPwYvdhrrQ4hQnWWKlFZugHicEwtnDJydj3PP7qzPhEJwBw9FA5kD76H:EUPh3Q4unoAaRcrU5WwBSFR70
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0e95f96d4c8e49913f6883184c1bdeb2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MSBCompilScript
MSBPRunScript
MSBRunScript
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ