??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
Behavioral task
behavioral1
Sample
26e20a4d70a7014c772eef200a844114_JaffaCakes118.exe
Resource
win7-20240708-en
Target
26e20a4d70a7014c772eef200a844114_JaffaCakes118
Size
2.1MB
MD5
26e20a4d70a7014c772eef200a844114
SHA1
06635a1c99c39c82e227779a244ac2a798d8a410
SHA256
b49706a93821c638152ce58debad95ecf3efb52c16308a3b89ab096d89293d1f
SHA512
26f0f7a422e6129a1aaa47e1ca475bb169d7390d085b2908da42d61ec18903628012d9b62f4d85f05f8c155ce98aa22d990f7cece922462e903e0df7c89ea4df
SSDEEP
24576:NMV4TScmMKHZQz141KlUuXa2rFT3/M515AVKuLZHfrPoseTv7zqIvmwOUUsV:NMqerMSs14glev15AVK2jIzOIvj
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
26e20a4d70a7014c772eef200a844114_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE