@@Muddoor2@Finalize
@@Muddoor2@Initialize
@@Winmain@Finalize
@@Winmain@Initialize
__GetExceptDLLinfo
___CPPdebugHook
add_user
Behavioral task
behavioral1
Sample
a9b5b983099c3a3b4f8b857fc4e33a6e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a9b5b983099c3a3b4f8b857fc4e33a6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a9b5b983099c3a3b4f8b857fc4e33a6e_JaffaCakes118
Size
99KB
MD5
a9b5b983099c3a3b4f8b857fc4e33a6e
SHA1
ce21c2e7dd47446763c70266fae8c5a1ed2a1248
SHA256
ebf650c8d0639a9d334672f64cc44c0543174b9af8f6777129882e8d04c9ba6b
SHA512
ca8207cff832de218e77908246b941c8423a37578c5a86d215e4a731d6355b442a468f10e2b03f7a3b0d3c7dee1c052e921806d57014dfb33a3337988fe5c5f3
SSDEEP
3072:JWJav9aaS8RK4gpkHUwXXNR3+Vt1fyskLCL:JmCVhdXXNNskL2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9b5b983099c3a3b4f8b857fc4e33a6e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Muddoor2@Finalize
@@Muddoor2@Initialize
@@Winmain@Finalize
@@Winmain@Initialize
__GetExceptDLLinfo
___CPPdebugHook
add_user
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ