??0CFileEnum@@QAE@XZ
??4CFileEnum@@QAEAAV0@ABV0@@Z
?fnFileEnum@@YAHXZ
?nFileEnum@@3HA
InitMyCopy
MyCopyFile
StopMyCopy
ZeroFileHead
Static task
static1
Behavioral task
behavioral1
Sample
新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
流星剑杀毒.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
流星剑杀毒.exe
Resource
win10v2004-20240802-en
Target
b0ebe6a4f30bbb682da0a22ee29de6eb_JaffaCakes118
Size
385KB
MD5
b0ebe6a4f30bbb682da0a22ee29de6eb
SHA1
5c5a0fe8e780d0e9a477b16d5da6847b9bf35497
SHA256
604cf2463107d884cb6a036f6dbf31d4b91edd161d66a1a055732410a44f1bf7
SHA512
900a3b14af7bc93f341fc50bc36222b9f045536f7e18538ac04e08f419b67e234fd91aeeaa365980dadc5f017178b53655bd049ea28683b06423dd52ab8e61ff
SSDEEP
12288:qBSnKLy3BhIdCPVeBd5VH7cgme28hdu66x/2vN:ASKu3DPojBcOiV2l
Checks for missing Authenticode signature.
resource |
---|
unpack001/流星剑杀毒.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
??0CFileEnum@@QAE@XZ
??4CFileEnum@@QAEAAV0@ABV0@@Z
?fnFileEnum@@YAHXZ
?nFileEnum@@3HA
InitMyCopy
MyCopyFile
StopMyCopy
ZeroFileHead
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE