@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
Behavioral task
behavioral1
Sample
25056e148094a49d5d781ac0279b41ca_JaffaCakes118.exe
Resource
win7-20240903-en
Target
25056e148094a49d5d781ac0279b41ca_JaffaCakes118
Size
8.0MB
MD5
25056e148094a49d5d781ac0279b41ca
SHA1
c2866e172bb5144c78811970d5903b09843710cc
SHA256
e6c8b5b66d6b07ee2b808416992c2296e2ac87a5805b2d8d6dd58822fe6eb6eb
SHA512
a34e234814d641fed694f42bbd1fbf2e156421a56c4cf97116b6066617f512f87231b49fea9f1ef57c7e728b16c6ca015fa7e3d18950c6afa53b180354c7ddd8
SSDEEP
196608:B9cu7QbQxfNgrJ53MN/GfzqkSSkACtwNr88EP562CkKp:B9csHfNgV53MNufzqYMw8XR6D
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25056e148094a49d5d781ac0279b41ca_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Pform_u@Finalize
@@Pform_u@Initialize
@@Unzipper@Finalize
@@Unzipper@Initialize
__GetExceptDLLinfo
___CPPdebugHook
_mainform
_pForm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ