_AVClose@4
_AVInitialise@8
_AVRetrieveInstanceInfo@8
_AVScanObject@12
_AVUpdate@8
_RetrieveExtensionLists@16
_RetrieveSingleExtensionList@4
Behavioral task
behavioral1
Sample
878f9a96c5d4f5a636efa2e5384caa2c_JaffaCakes118.exe
Resource
win7-20240704-en
Target
878f9a96c5d4f5a636efa2e5384caa2c_JaffaCakes118
Size
2.4MB
MD5
878f9a96c5d4f5a636efa2e5384caa2c
SHA1
93d87ef2a45975bf02b126dba8c6d221852be84e
SHA256
1cacd90e884ca72dfe2fb3d1e0cf3db5bc03313eb9869d0e97fc7c51b932cac1
SHA512
434ad291d6d9d9438bdec6e3f6753740ec169c9863bf85bbf09191c144351c44dcdfc0469c047457bc7e68def4c354e22376f50ad88b99fe9968957907b78e47
SSDEEP
49152:a/GwaizYk9XhIOCszIv0uLm5ZLpndA+vKQFrZ1eMUKXCuPTH0R/Kz1vLxbbdkNj:PAYKXFIv0Nvlny+v7FrLdUuCKU8pvZbc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
878f9a96c5d4f5a636efa2e5384caa2c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_AVClose@4
_AVInitialise@8
_AVRetrieveInstanceInfo@8
_AVScanObject@12
_AVUpdate@8
_RetrieveExtensionLists@16
_RetrieveSingleExtensionList@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ