rdhhkk1
rdhhkk2
Behavioral task
behavioral1
Sample
63067f38c05983cb69c30a6b34760389_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63067f38c05983cb69c30a6b34760389_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63067f38c05983cb69c30a6b34760389_JaffaCakes118
Size
19KB
MD5
63067f38c05983cb69c30a6b34760389
SHA1
02e5c30fb8ca552203c3c8c8781ddad93ebad56b
SHA256
96f876583b240b39e1275b40a3becb49b3345d3d8b434c2bb70a072aea259f8d
SHA512
0c6350717ed69df08c9052937e7bf7b9fb6e08dfba568f0aafa908c8e7b1a7ba8aee5ebca70a5e1388fe36e9f23e079d304efcc6283a858758a1608f63615e0f
SSDEEP
384:NVPumoOdeTGPANz1MRabaWzxbIZzquo1wfDdVg33Ba:NV3oOdeyI91H+y2zLoCfS3g
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
63067f38c05983cb69c30a6b34760389_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
rdhhkk1
rdhhkk2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ