G_S
Get_Cam
Behavioral task
behavioral1
Sample
666dfffc010b156355d4159e6d2acd6b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
666dfffc010b156355d4159e6d2acd6b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
666dfffc010b156355d4159e6d2acd6b_JaffaCakes118
Size
50KB
MD5
666dfffc010b156355d4159e6d2acd6b
SHA1
40cd1051abcccb4b4fa6a03c647a31b87dd32b14
SHA256
b7246a222b59890ee3db3e50c42a859bdb5ebe721b6799c37c05033e3de5fa37
SHA512
2107f4358bfb944bd96be0ce1b21547c5a4401e0044b9e90c17cdc8ab7efef18d450cb2802c4ea5134b13c51bf364ff5a59875535e7e545da92ac9ae6c6ef7fa
SSDEEP
1536:8qVNQVNrt2VOo2tfjx2ivoprN6vzGzEuqY8ua:8qiwOo2d/QpRrEnHu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
666dfffc010b156355d4159e6d2acd6b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
G_S
Get_Cam
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ