MyFunc107
MyFunc42
Behavioral task
behavioral1
Sample
5b35f8161f08608bd4d83743c85af0c7_JaffaCakes118.exe
Resource
win7-20240705-en
Target
5b35f8161f08608bd4d83743c85af0c7_JaffaCakes118
Size
439KB
MD5
5b35f8161f08608bd4d83743c85af0c7
SHA1
23816eb8bd5b90c503a8ad5e07fe7094708af494
SHA256
cf5e68005740d168697a3543d0a666d509ffd86b8990b4afc31ce1fa442cfb06
SHA512
30d713d99b209fa2b8cf0bf41a3a78068b86dbfb761e332e789cfc556a3ac4e631186782acfc53a4f17eb02bfac071c15f0727e1368fa1e24499a1d3f07938a6
SSDEEP
12288:b2DsLokOz2xuiWhkJGbJT1HJZEH+OBX2DKZdZm:iDsLdOKxuSIbJBHJmH+cCqd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5b35f8161f08608bd4d83743c85af0c7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MyFunc107
MyFunc42
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ