explorerxxx1
explorerxxx2
Behavioral task
behavioral1
Sample
2788d50b0d92d39ee40c2f32cc3956e4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2788d50b0d92d39ee40c2f32cc3956e4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2788d50b0d92d39ee40c2f32cc3956e4_JaffaCakes118
Size
18KB
MD5
2788d50b0d92d39ee40c2f32cc3956e4
SHA1
a7c85efabc7007ecc17ab85471bce42d9f0f293d
SHA256
daa81dca03115d3762dca6370f45b713c1587fdce9d79c9fb7a23acca10373b9
SHA512
36452344b28775e3dd8a9f9bab26967de2393f6717216f6ccf44780c47639c476faead47b240c83b2a305118f7d672263fa34f14d65c3d4838ec986564067443
SSDEEP
384:JTfdKRA2h51RJfOz8M+55RL6F1aHU4EOfI9sH/OXJZVuPLIG:J7iA2h/ffOYL5RM1T4ENVJXSh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2788d50b0d92d39ee40c2f32cc3956e4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
explorerxxx1
explorerxxx2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ