@@Chat@Finalize
@@Chat@Initialize
@@Server@Finalize
@@Server@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
ac65bdc6b9f3cb5b87043a9381625625_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ac65bdc6b9f3cb5b87043a9381625625_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ac65bdc6b9f3cb5b87043a9381625625_JaffaCakes118
Size
1.5MB
MD5
ac65bdc6b9f3cb5b87043a9381625625
SHA1
0d003f08a73a555259623f0489245ae5dbd6d09b
SHA256
3580f5226da2fdfd849189db6471e32bb51c9519c40463d1d22f33947aa4f9c3
SHA512
e67ffabff61f551a1734d921e73a6a5077166935d38b95a8c5a5b4cdc333b97156a91eb8b73c93760bb7c3e1aecdf8167176fd72f8e171452d5f01e8be075d65
SSDEEP
24576:leVRrhMxY9FDY8cLa/OerzTrNtSt7eo69B2HBoXZr:leHDPc8/WE9w7eF2HBOh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac65bdc6b9f3cb5b87043a9381625625_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@@Chat@Finalize
@@Chat@Initialize
@@Server@Finalize
@@Server@Initialize
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE