CheckForCodec
CheckForDevice
Behavioral task
behavioral1
Sample
07c8d6b9f4583db4852e3b0b05bb9a46_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07c8d6b9f4583db4852e3b0b05bb9a46_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
07c8d6b9f4583db4852e3b0b05bb9a46_JaffaCakes118
Size
53KB
MD5
07c8d6b9f4583db4852e3b0b05bb9a46
SHA1
23c7e0e0d777e26d4dc1bd24d5c6ab349873b5d2
SHA256
b3434e5f21b266b7a6458f5007766752f813514579617ddf10a62b6849e113d5
SHA512
a1dfb2a49f6c91760aab9aead91112e79baf171dd54e74174643d1c714b17bcda3b972a23b9170c6e7cc7ca0ead7e495f2aa84b78b83fce06cfa129ff0514157
SSDEEP
1536:jidHbiCxFJKSzxxwYWfcr3fEnUzzHkg7d1R:jkHbFkO73fZzYO1R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07c8d6b9f4583db4852e3b0b05bb9a46_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CheckForCodec
CheckForDevice
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ