InstallPlugin
PluginVersion
TerminatePlugin
Behavioral task
behavioral1
Sample
f0e78895a0401da2b6e9322bdb60f0b3_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f0e78895a0401da2b6e9322bdb60f0b3_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f0e78895a0401da2b6e9322bdb60f0b3_JaffaCakes118
Size
19KB
MD5
f0e78895a0401da2b6e9322bdb60f0b3
SHA1
9f291f7ceb3af0b1382ac82eba2032a7b03aa778
SHA256
558bb88e529e56d7ab0508ddce256d80766ef25a0f1b8f816f5e71b0e81b5765
SHA512
3a8e1bf849279c8bf02539cda7c9b0c82527669c7ac4f5d69f2c1b03b33ab62f9fdbe776bb916c2abc0c9c743120e6251837c1b366286f773e7cce3273f230c2
SSDEEP
384:OPlh77acaPpy18XweKGuSUawUIFh2yRorTRPT05iTN8C6VtDqPTQR:OPH92pRXzwUImJRTaiTdWD7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f0e78895a0401da2b6e9322bdb60f0b3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallPlugin
PluginVersion
TerminatePlugin
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ