Z1
Z2
Behavioral task
behavioral1
Sample
17b140477960de13a2087db35e206d9b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17b140477960de13a2087db35e206d9b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
17b140477960de13a2087db35e206d9b_JaffaCakes118
Size
78KB
MD5
17b140477960de13a2087db35e206d9b
SHA1
9917456e5a892aac63e6dd9078122abef96d02e2
SHA256
7641667cd3bc9e86f0a9791e3a5cc07bd2ce0e7bde6fb3840637eb28a26cd6d4
SHA512
6bef3e0082666f68d82f10a2cf7fa08f6dd9c1d95825d7eb99fc1899bca580e3fade3be039bb115db79d5b893413a13a9d08a1f2f757aead53616e5346ab490a
SSDEEP
1536:gCj1BY974pcEvjKlay+cbg+aAMyWsfREJbuvPHVoGSXX8GFyyuPdLnz3364o:gCj1BY9ULkZbqAMVQRLv9oGSn8Gknz6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
17b140477960de13a2087db35e206d9b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Z1
Z2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ