jjj
kkk
xxx
Behavioral task
behavioral1
Sample
fd204e2004278b78e70e75728b2673f8_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fd204e2004278b78e70e75728b2673f8_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fd204e2004278b78e70e75728b2673f8_JaffaCakes118
Size
10KB
MD5
fd204e2004278b78e70e75728b2673f8
SHA1
89f0841c4a9cb5feff389c57b78fd65309563fa0
SHA256
08476e86d189103ca59e203a1f7f2e4ce0cd51b3af1524119da7936511f4c353
SHA512
1f5cc320ca7112ed66e40e3c388d7590a73a2b9cd99e856c23608500c6bce557437bf2aece2db0f8f504feccbf85eec321d4062c138807ab55c784787db512f5
SSDEEP
192:8KELkNtSV59AhiuH2Us9/TBGlYpatRkQ10ClDlM3pFqkRQaTrtxDEfGG:iIH4PAhi42UyBwHRH106DlmpFqkKaT/O
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fd204e2004278b78e70e75728b2673f8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ