@@Logic@Finalize
@@Logic@Initialize
@@Useragent@Finalize
@@Useragent@Initialize
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
851d19f5685d3dbd4a94793262a60e5c_JaffaCakes118.exe
Resource
win7-20240704-en
Target
851d19f5685d3dbd4a94793262a60e5c_JaffaCakes118
Size
119KB
MD5
851d19f5685d3dbd4a94793262a60e5c
SHA1
63b38a6ee871d6f1cf4fa81dde88be1c6518d4a3
SHA256
583c4ca424dbdc4d988bdcca47467015e582c00d62192fc67a71c13270999447
SHA512
c1966ae2b343f0b5c9b23bbe760eb78c681bb39699f67e66ecdab6551c3eb661e985216bd2e8b573edae7123477aad44304a8b43a667f2aec37f6d1702bb5e49
SSDEEP
1536:K8XRYsMhJ+jN7s3gFdOzdpv/uT0QtFiZlSXdhjrdzk3S4I7qWgRrhhgbUP6EOaUK:BXyhJ+jfczWAlW6CqWohgbwtVUm8gC2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
851d19f5685d3dbd4a94793262a60e5c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Logic@Finalize
@@Logic@Initialize
@@Useragent@Finalize
@@Useragent@Initialize
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ