vlc_entry__1_0_0e
vlc_entry_copyright__1_0_0e
vlc_entry_license__1_0_0e
Behavioral task
behavioral1
Sample
35270b5f9fea24993d87cc1a5745e1c9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35270b5f9fea24993d87cc1a5745e1c9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35270b5f9fea24993d87cc1a5745e1c9_JaffaCakes118
Size
25KB
MD5
35270b5f9fea24993d87cc1a5745e1c9
SHA1
5b9564dffcf8b62d22c810eab4f6cd89c7038540
SHA256
43c28d8663dbf236a06545fe0b1fc928f51599b1074a48b5865302967e2a3b80
SHA512
fc71813beac3b138efb9407a7463e8db491d989d0bc094231339b20ebc27e3c4b347087ad121d4fad81240efc2dc0ab51dad1ccc958639ff39495ddb3ea0871d
SSDEEP
384:C9tzbM3m63EBy0dKt3s42nau7BjFNldB+Ytgn8jJRLIhLM+/FwyIdkhZZd62DgO:C9u3H0xB7Bp72n8iY+tw9khluO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
35270b5f9fea24993d87cc1a5745e1c9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
vlc_entry__1_0_0e
vlc_entry_copyright__1_0_0e
vlc_entry_license__1_0_0e
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE