z80ex_create
z80ex_destroy
z80ex_doing_halt
z80ex_get_reg
z80ex_int
z80ex_int_possible
z80ex_last_op_type
z80ex_next_t_state
z80ex_nmi
z80ex_nmi_possible
z80ex_op_tstate
z80ex_reset
z80ex_set_reg
z80ex_set_tstate_callback
z80ex_step
z80ex_w_states
Behavioral task
behavioral1
Sample
05e596411df5445e607c0ae67af333dc_JaffaCakes118.exe
Resource
win7-20240903-en
Target
05e596411df5445e607c0ae67af333dc_JaffaCakes118
Size
234KB
MD5
05e596411df5445e607c0ae67af333dc
SHA1
a490fcb6a4ef2e6f72fd9d5a46dc6b04996ab87b
SHA256
7ffd4e933d74d686fd4b5bc19239cb8b0432e5b783ac4ed96ef8b4e8b4f6e312
SHA512
bb6a6e152af77082293b30113b014d5f75d665ad83e3ed544057d09e96ad18233c8f54e81f763cf48ee08155308253a047e1a652ee3a8ef634493fbcfa8e748c
SSDEEP
3072:ScdI+CTxUTEWabCP+1zNyBKsSGDuuVULSGzQmI5pXZnjymMOJ5vKJjwXV5eF8cG5:zd7axWP6r3xFI57jJrCjwF5eFFGI/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
05e596411df5445e607c0ae67af333dc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
z80ex_create
z80ex_destroy
z80ex_doing_halt
z80ex_get_reg
z80ex_int
z80ex_int_possible
z80ex_last_op_type
z80ex_next_t_state
z80ex_nmi
z80ex_nmi_possible
z80ex_op_tstate
z80ex_reset
z80ex_set_reg
z80ex_set_tstate_callback
z80ex_step
z80ex_w_states
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ