@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
Behavioral task
behavioral1
Sample
2d1a4f50f7aca96fa3d90c7ec784d498_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d1a4f50f7aca96fa3d90c7ec784d498_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2d1a4f50f7aca96fa3d90c7ec784d498_JaffaCakes118
Size
7.8MB
MD5
2d1a4f50f7aca96fa3d90c7ec784d498
SHA1
5fbc224200588bc412dd2b78114f6717da2d174d
SHA256
cdd9f0faa7578272c03d5313fab3585833888b9f46548bf9c55d680e06e0b5f9
SHA512
f6c313fd76c728cf9e7941a456ce44b21f4caa11612f2516f10919aae07e44687a5aeb9e08566046ff2d7df8ddaa3c265700cf35c59dd6983ebddc146202ba00
SSDEEP
196608:MgRQortxUlX84nrfkCbwLiP9ZT2qB/8zqyca:MLmwG49wiZzB/CqU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d1a4f50f7aca96fa3d90c7ec784d498_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE