_bbWinMain@0
runtimeGetRuntime
Behavioral task
behavioral1
Sample
a786cdc6c69538a2a8ee1b1a48deb719_JaffaCakes118.exe
Resource
win7-20240704-en
Target
a786cdc6c69538a2a8ee1b1a48deb719_JaffaCakes118
Size
468KB
MD5
a786cdc6c69538a2a8ee1b1a48deb719
SHA1
331677a01d2c05e1fe890b6c0dbfdfbe29f24afd
SHA256
4881ff9e96cc15e37bb34f77862a7abea75420153c7182ea74490ee7f7bc632f
SHA512
32c9cc68b4d46dbafe5667c591e6827b5ce054d4a195ceb805d18fc0e96a8eeedf726a20cee7d447aa015277b6e04f7afa80467b24fca3146275e18be108ceb9
SSDEEP
12288:YMeQ8xoUAg5CMo/jd7ewktZbZhroVho1C9ugVuY4DoN35yjs4:4QxUbvl/fufTXkDu3Ejs4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a786cdc6c69538a2a8ee1b1a48deb719_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_bbWinMain@0
runtimeGetRuntime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ