@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
Behavioral task
behavioral1
Sample
b387baa622edd90a93700b7ed0149d52_JaffaCakes118.exe
Resource
win7-20240704-en
Target
b387baa622edd90a93700b7ed0149d52_JaffaCakes118
Size
9.7MB
MD5
b387baa622edd90a93700b7ed0149d52
SHA1
548ad4acfc667758d595cff7d5e19a1990ed2d74
SHA256
7d948dd739efc71aed045e43cfa38b942fbd4492aaf5eabbd6cc1494c90ef811
SHA512
b0c0c33b462d0ca9f648dd72cbeeffa225cea786a1eac7b11a97875e4fe79fb66f660bf6e3889bded41f3d459d0cff74127b53e49b6781270fbb0af515dca113
SSDEEP
196608:c92xfNgrJ53MN/GfzqkSSkACtwNr88EP562CkKv:c0fNgV53MNufzqYMw8XR6F
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b387baa622edd90a93700b7ed0149d52_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE