Install
InstallEx
Behavioral task
behavioral1
Sample
cd93f5a1814a68f668c5ccf406545055_JaffaCakes118.dll
Resource
win7-20231129-en
Target
cd93f5a1814a68f668c5ccf406545055_JaffaCakes118
Size
20.0MB
MD5
cd93f5a1814a68f668c5ccf406545055
SHA1
74a80af67025d0f40d12bb89bd9f132e5b543f0b
SHA256
f975c273ee1a577d14a428bb443b94b5815091fa06637387e116ef3d36030b2e
SHA512
653b7640781680daec691fe4b19b91d793be9cf73464dda9c9d90b5ed738635829086e223a23d97d5fb50635a29fd3882dc5372ffaed8bbda211f5616c0171b4
SSDEEP
393216:4DoFlakdDoh42jzmZqH/2xgUycZmORUwrLYO9l+qHp23MUUUtYp:LRdDS42jzmZfxzxRUwHG3OP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cd93f5a1814a68f668c5ccf406545055_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
InstallEx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ