?Initialize@CORE@@QAA_NXZ
?Load_ModulesTable@MODULES_TABLE@@QAAXXZ
?Run@COMPILER@@QAA_NXZ
?SetProgramDirectory@COMPILER@@QAAXPAD@Z
Behavioral task
behavioral1
Sample
df7e9d4106d14fc43590468090edd8bf_JaffaCakes118.exe
Resource
win7-20240903-en
Target
df7e9d4106d14fc43590468090edd8bf_JaffaCakes118
Size
710KB
MD5
df7e9d4106d14fc43590468090edd8bf
SHA1
44aa0a49b42691b86debd0e766e75600bde284a5
SHA256
1be8d9fe1267465cdd7183881b3f2f8397c2609aa3799005347f19380f0108a6
SHA512
b85746cba83ec9dd8093c21fa2df37ef9dff7a3ce68969c050e90373d314b0fa54f98d83e72ee268b2b8a83b5d11ed79d4674f6bcf9d1bd8f6e17c7b14a73b9d
SSDEEP
12288:jYyacHgQ6r2nSbdG9NZUTDth6ESJcIG/tiWop4SgXkubKKE/cnT6tkIqCvUGz:jYzcHOrhdG9NZUTy+/tqVgbNxnT2lBp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df7e9d4106d14fc43590468090edd8bf_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
?Initialize@CORE@@QAA_NXZ
?Load_ModulesTable@MODULES_TABLE@@QAAXXZ
?Run@COMPILER@@QAA_NXZ
?SetProgramDirectory@COMPILER@@QAAXPAD@Z
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE