FuckRising
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
explore
Behavioral task
behavioral1
Sample
2d172b8ac058c2bb15ce05d74eef8571_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d172b8ac058c2bb15ce05d74eef8571_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d172b8ac058c2bb15ce05d74eef8571_JaffaCakes118
Size
152KB
MD5
2d172b8ac058c2bb15ce05d74eef8571
SHA1
4fc31aef90ef162d5e7e50268dbed1d8595de393
SHA256
49a093b6d9891c2faa4d736eeb3fa9a5824308b9c39e9384257193e1f5308350
SHA512
3ad0ca8c07bd010fefab367cad0c4d20fdbd82dcf817b84046cb5367e817211d7331cbcb8271f26d36e5b74a2ed8a13fdb1c81c16cbbcbf19c886d520d6d64cd
SSDEEP
3072:shx2/GFjclfRBmv25iyV9edd58ZIvEXMX4QG1H+T7Li3LmxsP/:srFW025it+Q2ZQ6H+G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d172b8ac058c2bb15ce05d74eef8571_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FuckRising
SchedServiceMain
ServiceMain
SvchostEntry_W32Time
explore
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ