DelFilex
Install
ServiceMain
Unstallx
UpdateX
Behavioral task
behavioral1
Sample
f9f68157c2a9e14c39a418f261d16c6e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f9f68157c2a9e14c39a418f261d16c6e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f9f68157c2a9e14c39a418f261d16c6e_JaffaCakes118
Size
58KB
MD5
f9f68157c2a9e14c39a418f261d16c6e
SHA1
b51cea391e4392b28c5f863a4b81624b762a4296
SHA256
6af19a5a565128eab734470e27ee4487c458a95f7311eb8c3973018f4c04613d
SHA512
a70a6bea9629f3634fcbd3157854e55117cc58275092539292841924743c24460375255a2f4522945c994b7b2c5fdff3b31fd37014a879c5ee58492788796ef9
SSDEEP
1536:FRziskRcZzk/eJurtKr1iXC0mb1dOxCi0tGOtR1XJbuQK:F5iDx2A5Kr1iXCj1daKR1huQK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f9f68157c2a9e14c39a418f261d16c6e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelFilex
Install
ServiceMain
Unstallx
UpdateX
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ