pcre_callout
pcre_compile
pcre_compile2
pcre_exec
pcre_free
pcre_fullinfo
pcre_malloc
pcre_stack_free
pcre_stack_malloc
pcre_study
Behavioral task
behavioral1
Sample
3326d783e2daa78f70e4d6951c499e72_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3326d783e2daa78f70e4d6951c499e72_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3326d783e2daa78f70e4d6951c499e72_JaffaCakes118
Size
119KB
MD5
3326d783e2daa78f70e4d6951c499e72
SHA1
f26a4668b9f290875455007a74ad6cb400c654a4
SHA256
6679aafcfedf3e5965a617f1c8509f0983753d7aa99c96d75806d26c82487cc4
SHA512
6a30da1ea699bad7ad9eb5786875ba0c5142e7367a5360d9d5516c1c673e42677b3363f33c00dc6c17a993f8b75bdd7954c7e784c989529a7d3770795d884764
SSDEEP
3072:odCNjFm0EMFjtXXTCTzdYLUzcCRKy3HfwqI4g60XsE0zq1Pa:odC9FDnFjUTzcUYvKHfcf6RE0zy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3326d783e2daa78f70e4d6951c499e72_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
pcre_callout
pcre_compile
pcre_compile2
pcre_exec
pcre_free
pcre_fullinfo
pcre_malloc
pcre_stack_free
pcre_stack_malloc
pcre_study
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ