_LibMain@12
_MM_DD_9985MM_DP_9985r
_SetHkoo2
Behavioral task
behavioral1
Sample
1c5ffd60d5c9f18faaae9ba342225828_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c5ffd60d5c9f18faaae9ba342225828_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c5ffd60d5c9f18faaae9ba342225828_JaffaCakes118
Size
7KB
MD5
1c5ffd60d5c9f18faaae9ba342225828
SHA1
ed0ac7b72d71316cc51f013650d1268607abd73c
SHA256
b5a758f3068e2558ec510ede638a14cf9b679d9a5edfbf2ad2f3d534a53808f5
SHA512
788b97b7357edc1da04a3001f639affedf46cff6fd3a83708d12334a3993cdd80da2eed5c17f5ac19832e8f76ab3348935ea402efe6229337ddeb03dbfe23717
SSDEEP
192:d7Y1hcRUwvOMFUpdfUI19gS4OO1Uq176FAT:d7YnRWOMFUjuSG5h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c5ffd60d5c9f18faaae9ba342225828_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LibMain@12
_MM_DD_9985MM_DP_9985r
_SetHkoo2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ