@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
Behavioral task
behavioral1
Sample
1a85ca5bf694e7357236889504df9217_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a85ca5bf694e7357236889504df9217_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
1a85ca5bf694e7357236889504df9217_JaffaCakes118
Size
6.6MB
MD5
1a85ca5bf694e7357236889504df9217
SHA1
b810bc8e01745c6ed97a16d2c08db65b692c0ae9
SHA256
f44cde0ffeb409fcaa62b639042b59a94bdb43b32518680d402427cf5c47718c
SHA512
b8521cde0d6b88dc7538185f099ec23c16f736f7a535ec25f2ba3cd3a3de7332753e6684bea628c430dc86ab074c16dc8b2d2ce99ed6a2639c0c05918ff255a5
SSDEEP
98304:3jaPFqf1TRimu8yN+5rJImcAz9hqjQyb1dzU96IzsHkS4VkAN/:zbexfNgrJ53MN/GfzqkSSkAp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a85ca5bf694e7357236889504df9217_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE