??4_Init_locks@std@@QAEAAV01@ABV01@@Z
CoreGetShell
Behavioral task
behavioral1
Sample
071de96666aacc116a96fc4e7c98163d_JaffaCakes118.exe
Resource
win7-20240903-en
Target
071de96666aacc116a96fc4e7c98163d_JaffaCakes118
Size
1.0MB
MD5
071de96666aacc116a96fc4e7c98163d
SHA1
9dfe046d7a4431d962b2dd1638481aaa390af423
SHA256
acd0c1c5f238aee30e8d7042c707a9af58604ef88b2f9e2cde5eb04b587f2e45
SHA512
d26d04fcc70f2306aed7b32eb38b25c81b3cf042181511b9727313395c11941ec173dc3a895ab1105e8b2467f097f7145d7450896e7d5e7a482b02e730a890e5
SSDEEP
24576:ItQzgEm71oioQa7BQiD6VebF6UI8Nf+S6/XHY6:SQzNioQKQLeb/d+FY6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
071de96666aacc116a96fc4e7c98163d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
CoreGetShell
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE