IEVersao
IEVersao
Teste
Teste2
baixa
mataavg
porta
sql1
sql2
sql3
Behavioral task
behavioral1
Sample
628a791d284d65923304ef532658a254_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
628a791d284d65923304ef532658a254_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
628a791d284d65923304ef532658a254_JaffaCakes118
Size
326KB
MD5
628a791d284d65923304ef532658a254
SHA1
126d63e8d7744d11fba960300d6d859ccb068b4f
SHA256
7a01397537750c412db04e3f6d8a1c30a5a5a14fdfa327c12c3e437b0ca4552a
SHA512
bc75ffb3c938fc0918c58057a45e1abbb5992c6dcbd179f72b34202f9257b19828a794a68789790a177ae564ea23fbdbc4ecd945c313d4ee971adb187aacbe28
SSDEEP
6144:ffrjOLp1lnBI5NF6rIGZsSTxaPTxIs6mrht+3OlXT5kJ+YptwSnzQBHCocFtvjsQ:ffra3lnk2OSTxa7xIXmDKMXT5O+Yp/nY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
628a791d284d65923304ef532658a254_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IEVersao
IEVersao
Teste
Teste2
baixa
mataavg
porta
sql1
sql2
sql3
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ