allert
load
windows
Behavioral task
behavioral1
Sample
055ad92121425e2cd00742c4ca7fde52_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
055ad92121425e2cd00742c4ca7fde52_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
055ad92121425e2cd00742c4ca7fde52_JaffaCakes118
Size
8KB
MD5
055ad92121425e2cd00742c4ca7fde52
SHA1
40b5cb81d306610d63d2064a37745c0d2dff6402
SHA256
d0add27f542c8eef09e25a25475074993150c5ebc78601c9a5e618d0b88f643f
SHA512
f73a275b8263fbe772201b458366f796b8829cd6ae0a70489e185c296f8b01a22c8ebb2c558dc6fe36d337c34ec1c48e2956c9e6422203ff1e2018e88de56778
SSDEEP
192:oy8ko/J8hdnim6FSj7d0PAqVnVrqbbKxe+ujzlY4TmR:Ikx6sj7a5Vrqbbn+ujzll2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
055ad92121425e2cd00742c4ca7fde52_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
allert
load
windows
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ