@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
Behavioral task
behavioral1
Sample
78d58573028d4ec5ebec9b32bc78f04d_JaffaCakes118.exe
Resource
win7-20240729-en
Target
78d58573028d4ec5ebec9b32bc78f04d_JaffaCakes118
Size
8.6MB
MD5
78d58573028d4ec5ebec9b32bc78f04d
SHA1
6056a148195eabef406f99270c07016e91ae03fc
SHA256
d24870d9899eef9ffd4734e5959954240a1a15e7018243a980fcd74a0f5ea458
SHA512
e8304a6114bcf5a1ea97b1cf007d8f0763ed68c719073402bfe89dba0fe58d9e636174c7542781ed20c6284bcec872c151ab27edc65fbff2e3256e9e3265100b
SSDEEP
196608:qdNKgRQortxUlX84nrfkCbwLiP9ZT2qB/8zqycBGdgM+D:qdgLmwG49wiZzB/CqDag/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78d58573028d4ec5ebec9b32bc78f04d_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE