jjehzoa
vabefpxrisb
Behavioral task
behavioral1
Sample
f4d3479638a7a2fb4dcda8da20f2b312_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f4d3479638a7a2fb4dcda8da20f2b312_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f4d3479638a7a2fb4dcda8da20f2b312_JaffaCakes118
Size
73KB
MD5
f4d3479638a7a2fb4dcda8da20f2b312
SHA1
31e7b8d859bf2d32d52cec393f88687d11fe48c4
SHA256
843bd515dfd2a310cfb048da38071beffab3e11725604eb4a6fa8c4bbdd6db57
SHA512
dc873276d465adf5ba4fa3f9ed327b6a7eb60783119f205fea25d7902e43f3c50b0b87eabafb5fb1d430c8b53edc01c7c857e1877c6ed70ab6e75e36d03135bf
SSDEEP
1536:iGQJqNIEefI0v0guQiZb2PCc+ogGAmxDKTbOTRv20:iGQJq+LI0cga8Cc+ohA4DSSN7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f4d3479638a7a2fb4dcda8da20f2b312_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjehzoa
vabefpxrisb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.