AddMsg
CloseFileMapping
CloseFileMapping_readonly
GetPatcherWindowHandle
GetPluginDataMemory
GetRegDword
GetRegString
LoadFileMapping
Reg_Delete_Value
SearchAndReplace
SetRegDword
SetRegString
write_disk_file
Behavioral task
behavioral1
Sample
256edf431c8980c63e1fc3a8bdcbc8d6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
256edf431c8980c63e1fc3a8bdcbc8d6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
256edf431c8980c63e1fc3a8bdcbc8d6_JaffaCakes118
Size
285KB
MD5
256edf431c8980c63e1fc3a8bdcbc8d6
SHA1
bfe68482b0b8f01f59ead6802f4f0cf1b03661a5
SHA256
3379ef03c74a61d70998e3100ebfb7328a9d5a76972c5b81302e9316303c870d
SHA512
2079a272c051bba3bb9f6549e17a73f1a2b8d791e05dc05bbb72726ddd504c270da1cb51553de6e41aa04e4da11634a19b4aeba081836141c852cb5ae81c201d
SSDEEP
3072:ulKdXSYwp3a6h5wyNrOWIwMlY2eN8CxNvNXuuvuqpPcWAGHfAHubPdj:ulKJAvbwXPwOS8SNVPuYHfXR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
256edf431c8980c63e1fc3a8bdcbc8d6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AddMsg
CloseFileMapping
CloseFileMapping_readonly
GetPatcherWindowHandle
GetPluginDataMemory
GetRegDword
GetRegString
LoadFileMapping
Reg_Delete_Value
SearchAndReplace
SetRegDword
SetRegString
write_disk_file
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ