CPlApplet
CPlApplet
Behavioral task
behavioral1
Sample
07182c93a659479fe4ea7f2a711c91f9_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07182c93a659479fe4ea7f2a711c91f9_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
07182c93a659479fe4ea7f2a711c91f9_JaffaCakes118
Size
322KB
MD5
07182c93a659479fe4ea7f2a711c91f9
SHA1
24d0d39d7a150ab3ce8d2f3146b34ed60a9e45f2
SHA256
4565fd07561d1fb86038a9c5f3d5d44cc99613a711ed2009504f143f04468d0e
SHA512
062fdeab98786d8ebac0219304b61ff5afa1533c16e2ec2aa22adbf6fdab006147344f14f38364b6671292ac79116fed9b7e5e02253b1511193e2f98be0d1d4b
SSDEEP
6144:m3hUtsjR12txoWltVlC8L/6VbPvI4h1DxyO0l1qGbjyMuqrnzzm0:mxxjRmyWltVlCGb6YOK1qGluqrzi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07182c93a659479fe4ea7f2a711c91f9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CPlApplet
CPlApplet
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ