GetVersionInfo
component_getDescriptionFunc
hasInternetConnection
Behavioral task
behavioral1
Sample
178351792944e03763c53f5106b9e1c1_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
178351792944e03763c53f5106b9e1c1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
178351792944e03763c53f5106b9e1c1_JaffaCakes118
Size
5KB
MD5
178351792944e03763c53f5106b9e1c1
SHA1
39a77dd8aaa8400dd05fb025ca84ad781edea151
SHA256
43b0b3f1051a537aecb7345647bff52974d6ef3cdacbbd13692aef05dbff5331
SHA512
30c068b8e2f873ad8b383d7075ca92aded605b8cf15e036893038699abd09d5e5b0de927b10ebd558136b4e013c83251d5c3e9370bdfc25efcb698231c6c6136
SSDEEP
48:KQhrEfIiicI1hACqNyfAl27IRwmghuFzPgiEl9bJccuSeJY8JTaHIna3asqbVqal:hhWicI/QNy4jwTEFzoNCBWpqbv+Ih
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
178351792944e03763c53f5106b9e1c1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionInfo
component_getDescriptionFunc
hasInternetConnection
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ