@@Chat@Finalize
@@Chat@Initialize
@@Server@Finalize
@@Server@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
820849bd3ca5390537a2c0ab9fe21a30_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
820849bd3ca5390537a2c0ab9fe21a30_JaffaCakes118.exe
Resource
win10v2004-20240730-en
Target
820849bd3ca5390537a2c0ab9fe21a30_JaffaCakes118
Size
710KB
MD5
820849bd3ca5390537a2c0ab9fe21a30
SHA1
0a29d4c39c97eaf775eb4e7f08856c59a8964640
SHA256
5a1e96af52a93f3ec19fd27df235758b54c35ff29e5da148841da4431930bb9f
SHA512
1a363ff640981bcac13cee5e1201c2ddc336f294d5eeaa7936f19264880635cd44eae85aae951126dd8acf8b3aa6b4bcfaeb97ae74edfe67bc01a169f06333eb
SSDEEP
12288:Xbvg3kCe6foMt8ibbqf30TguTy1+ybEws4GyotfmwgmZ95UdhqeDtYHiV3jI:Xzg3q6w05b/8uTy1+ybEws4+frgmz5st
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
820849bd3ca5390537a2c0ab9fe21a30_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@@Chat@Finalize
@@Chat@Initialize
@@Server@Finalize
@@Server@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ