DelFilex
Install
ServiceMain
Unstallx
UpdateX
Behavioral task
behavioral1
Sample
45be851f6a06458cf408ec335fec9c61_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45be851f6a06458cf408ec335fec9c61_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45be851f6a06458cf408ec335fec9c61_JaffaCakes118
Size
58KB
MD5
45be851f6a06458cf408ec335fec9c61
SHA1
8ad21fc949dd1755f518818a448bf38957b8f7e7
SHA256
5675e8b5590c36ef6d34cbe777ee3abb979d094338c2901706f536a325ed0426
SHA512
e0cf5258de663432a4ee8cc821f3e80f0b0da3cc3725768dc3c1ad110bb9b35890a2ef7fc2444fd8e7e2391b44db18a82b8c5b173aacf6495eb45e61b9051164
SSDEEP
1536:qziskRpj8dd/Cklu55ire+O3OUHUTd2j8FIg:0iDvj8dYIa5ireVyd2j8/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45be851f6a06458cf408ec335fec9c61_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DelFilex
Install
ServiceMain
Unstallx
UpdateX
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ