@WndListDlg$qpvuiuil
@WndProc$qpvuiuil
__GetExceptDLLinfo
Behavioral task
behavioral1
Sample
ae4e229eb71b05dedfa2d5c87679aaa5_JaffaCakes118.exe
Resource
win7-20240708-en
Target
ae4e229eb71b05dedfa2d5c87679aaa5_JaffaCakes118
Size
21KB
MD5
ae4e229eb71b05dedfa2d5c87679aaa5
SHA1
8697e7ed648159832bc973f7cd6f1c40083d4be3
SHA256
4ef43ba27e7fd29f8427adb78dbc1945fcc8995b5706a229535944e10b76b75a
SHA512
64215597a71c786a88cae23ba264e54b48961717c11555c4eb2bbfa6fab96e3871791d48ef4dc3954fdd6df66c9f030fcc5190859f178375721ca566d62dd599
SSDEEP
384:BRbJ9AFannDGZwr80jjwVSVLMoZ8sKqScgdGWZhvaLgWQXmqf2O:BRQFWntjjRIgaXdGWHCHimqf2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae4e229eb71b05dedfa2d5c87679aaa5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
@WndListDlg$qpvuiuil
@WndProc$qpvuiuil
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ