dvo
jjhxfbksvc
joooo
pa
Behavioral task
behavioral1
Sample
f693d7fe75ea3ca541dce102de58acdf_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f693d7fe75ea3ca541dce102de58acdf_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f693d7fe75ea3ca541dce102de58acdf_JaffaCakes118
Size
299KB
MD5
f693d7fe75ea3ca541dce102de58acdf
SHA1
7ecf0286c7797e4b27c5e5cd52738fbd1d9fbbd5
SHA256
559228c787e921405cbbe91a43835a55f0b41d9f41fae4174ce0b6ef380f2003
SHA512
857ce2ecac2646dc2bedcbb0a18db702bf753d8c6c31fbb6e8b8444249d64312f67af91518840e9e560e7af1f4e993c5be5c4cddf9d50384aa305b9164b62f17
SSDEEP
6144:jfESQVNFsByXERUTDD0s2Bn3lzq+dvx6Gc7j3ijMzshvt+D0i8g:jf7GEeTH0pBn1zq+6Gc7kBoH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f693d7fe75ea3ca541dce102de58acdf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dvo
jjhxfbksvc
joooo
pa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ