RT_GetVersion
xCreateRemoteThread
xOpenThread
xVirtualAllocEx
xVirtualFreeEx
Behavioral task
behavioral1
Sample
067743eb1218ec130e2a95f62d7ecc60_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
067743eb1218ec130e2a95f62d7ecc60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
067743eb1218ec130e2a95f62d7ecc60_JaffaCakes118
Size
19KB
MD5
067743eb1218ec130e2a95f62d7ecc60
SHA1
7690d15de1f634d2e7652503d28aab1ea17ac6e5
SHA256
ce6c3aefd0185ee1db4eeb4713874ab874300274a658f58839063c2adac58657
SHA512
24d25fe3a98204a5117c689e0725783f3aaa8845bac17e125bc43ab6f842759dc9c4a7ff72762d21c813ce417353491e88c4a73daa6f214f86babad5cec236f1
SSDEEP
384:uH4IPYPLCFxIrJkmaywTgFD0Ma5kCgm6U/5UDvRX:E4gBFxICmaLgx0L5khLMAv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
067743eb1218ec130e2a95f62d7ecc60_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
RT_GetVersion
xCreateRemoteThread
xOpenThread
xVirtualAllocEx
xVirtualFreeEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ