?CalcFileMD5@@YAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV12@@Z
?CalcStringMD5@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@Z
Behavioral task
behavioral1
Sample
a0e56ce12d3d28ae97a038044ffeec1d_JaffaCakes118.exe
Resource
win7-20240705-en
Target
a0e56ce12d3d28ae97a038044ffeec1d_JaffaCakes118
Size
337KB
MD5
a0e56ce12d3d28ae97a038044ffeec1d
SHA1
9dbba9a897a032115e4fae164d156f880bee027d
SHA256
ea53a553cbda6c8cae78663fef548f218dfbe56a0e44fa934ee73507d22071f6
SHA512
de8124ff7add5da1cf1509ccd0e72a700628e95d45a6c76e8ce9ce8970e9ccd1aba01026ff7e7deb3cfd89dd540c7310ec9e4d78811aad130e08eb47c5e06258
SSDEEP
6144:3R2e/jgJkRuX4BvSZVaDm8h6Ax/5S5ZYv3chSndOx1ROXu43Q1s5jSbJSYoS:3jgJkhS+mE6OU+Uh4yOjsgjSbBoS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a0e56ce12d3d28ae97a038044ffeec1d_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?CalcFileMD5@@YAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV12@@Z
?CalcStringMD5@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@Z
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE