_FtpCreateDirectoryA@8
_FtpPutFileA@20
_FtpSetCurrentDirectoryA@8
_InternetCloseHandle@4
_InternetConnectA@32
_InternetOpenA@20
Behavioral task
behavioral1
Sample
b0985c2b6929c399dd18122623d33449_JaffaCakes118.exe
Resource
win7-20240704-en
Target
b0985c2b6929c399dd18122623d33449_JaffaCakes118
Size
71KB
MD5
b0985c2b6929c399dd18122623d33449
SHA1
8d94d1f68c8462ff50c1ee241d11c41fd7ae9e8f
SHA256
1b898d6b30a655bd7456af3916b5913dbc0c6328c3e23fed3920219760ded13d
SHA512
de708868207b56e887ae7a035e5749913032d255eb8bf9d540d0160110bfecb6176aa970d44aa1cc18d5373580e8741f4ab2024f4fdb0a911c35c860ba92a5f8
SSDEEP
1536:aY050JZJiquYmGf9dk8hazRa0FC2xMAT2Has13Ip:aL56LmGfgzEKxXTgv13I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b0985c2b6929c399dd18122623d33449_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_FtpCreateDirectoryA@8
_FtpPutFileA@20
_FtpSetCurrentDirectoryA@8
_InternetCloseHandle@4
_InternetConnectA@32
_InternetOpenA@20
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE