@@Chat@Finalize
@@Chat@Initialize
@@Server@Finalize
@@Server@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
22663393760ff197d68ef1e47d4e7617_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22663393760ff197d68ef1e47d4e7617_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
22663393760ff197d68ef1e47d4e7617_JaffaCakes118
Size
347KB
MD5
22663393760ff197d68ef1e47d4e7617
SHA1
934d4f6d245b0153fe0732a0f9a6c725011ef80f
SHA256
a887c7ccf0fdc73dd5b14289a541af807ea054cb9e6ef74b6a9d0255bad807fa
SHA512
5ffcfda77bdb2b893554160f2280f58eac3d44ed1583a7544499fee87ee0e46333d1fb88b1e943aa9096b1fc1120145b5653dac5445ec7ff2e58c09b03e682f9
SSDEEP
6144:5IG+vg3HSSOCkhwXLg9W/J6Mt8VifcfK5l56Vf37of73Qn22PoTs91gz/r+YNZ:6bvg3kCe6foMt8ibbqf30TguTy1+y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
22663393760ff197d68ef1e47d4e7617_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@@Chat@Finalize
@@Chat@Initialize
@@Server@Finalize
@@Server@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ