AddMsg
CloseFileMapping
CloseFileMapping_readonly
GetPatcherWindowHandle
GetPluginDataMemory
GetRegDword
GetRegString
LoadFileMapping
Reg_Delete_Value
SearchAndReplace
SetRegDword
SetRegString
write_disk_file
Behavioral task
behavioral1
Sample
71e8afe31d9cb5e6542989d5659fd5a9_JaffaCakes118.exe
Resource
win7-20240704-en
Target
71e8afe31d9cb5e6542989d5659fd5a9_JaffaCakes118
Size
75KB
MD5
71e8afe31d9cb5e6542989d5659fd5a9
SHA1
f752e78d732345fd0a63df1e405ab425a0df4f7f
SHA256
269c40ba1bca5fbbd55462b9815b4f262656b9f330e1c042c42bdac86fcbc6e1
SHA512
02ae5ca643439f2d0571652b6bba0c567f3fa18570454b78f42361a77dd36047a59d9db2f7902d5ef9104bed1aca37dfbcfe85945e814d3a3f416c929b897b91
SSDEEP
1536:bQDSg2xuWDXI5CvUO4PMNIa+qji2ljKWZrRQX9EMiroT:8DYMWL+CvUbPMaqji2kWRKnir
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
71e8afe31d9cb5e6542989d5659fd5a9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AddMsg
CloseFileMapping
CloseFileMapping_readonly
GetPatcherWindowHandle
GetPluginDataMemory
GetRegDword
GetRegString
LoadFileMapping
Reg_Delete_Value
SearchAndReplace
SetRegDword
SetRegString
write_disk_file
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ