ServiceMain
_UpdateProc@16
Behavioral task
behavioral1
Sample
265dc83c74ecb58abc6ea1b792f1255c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
265dc83c74ecb58abc6ea1b792f1255c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
265dc83c74ecb58abc6ea1b792f1255c_JaffaCakes118
Size
29KB
MD5
265dc83c74ecb58abc6ea1b792f1255c
SHA1
ffe558638acc2dcf5e387ec439491e150ed3ab33
SHA256
c5b3284cf1d3d539e9c3c009707a9c07d38bfa5792d18b879e375f7333e69836
SHA512
8ec584c2f7a57ece264bb90ec076ca55811be7e3fe4e6866a6ef36c6194d852c4c5501e0d53fe71c9d9832a85cfabf19cf5baa281e628d30781a72ce03e3c221
SSDEEP
768:8Qg6Js2nl0dE5GpSA0JCj1T6jf13JNl9YbSIk6DxHH6:8QV62l0e8eC52t3/Okd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
265dc83c74ecb58abc6ea1b792f1255c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ServiceMain
_UpdateProc@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ