jjj
kkk
xxx
Behavioral task
behavioral1
Sample
2eb198b59ecbc98688b3ae8f4b769430_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2eb198b59ecbc98688b3ae8f4b769430_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2eb198b59ecbc98688b3ae8f4b769430_JaffaCakes118
Size
10KB
MD5
2eb198b59ecbc98688b3ae8f4b769430
SHA1
d90693d892c885a5cf45d62f028b6135e84c598e
SHA256
c995c91f528910618d52fa37ae804a0e6ef4a988f264483a0cea06eadef10057
SHA512
4e9228fe57226996a325c12b83400d7561d218826718cd13891c9c5c66137592363ef148c4b3277f8e8a29e22ae0eaad632828f2257b0d13c901a297eae22fc3
SSDEEP
192:iLH33LxetwSDOB9X6qRgtN5iCRTmgIglXvl8bDTxY0u5iKs3FYwTp6m5Ea:SEOB9KqR4RTmgxlXvlKDTxVu5Hqp6o
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2eb198b59ecbc98688b3ae8f4b769430_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ