GetItemRunClass
GetReleaseIntfs
Static task
static1
Behavioral task
behavioral1
Sample
新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
机器码算法软件加密大师1.3.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
机器码算法软件加密大师1.3.exe
Resource
win10v2004-20240802-en
Target
eb4f14449d973487a19fd07125e7b158_JaffaCakes118
Size
1.6MB
MD5
eb4f14449d973487a19fd07125e7b158
SHA1
3c7b77001bc7de597322a547e8fb0bb788e575de
SHA256
dbf210bcd30f82caa32890b1d187584f48b31ef1079b62ef255285e1a8f494dd
SHA512
a65cb4bbdd8257b0f9338af262a20f7d2beac4b38ebc779d5c895e9c0eff3b4166834cc82391acb9967aecb04707d5b83a2e7aac62484208af438c8b287bf052
SSDEEP
49152:MGvFCg1dFb3nxUHLJUWyjNb563avYcza2ndiRb:WktiJuNb5cavBm2Wb
Checks for missing Authenticode signature.
resource |
---|
unpack001/机器码算法软件加密大师1.3.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetItemRunClass
GetReleaseIntfs
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ