F1
F2
F3
Behavioral task
behavioral1
Sample
6a1390ee2c37879f515d27bad7b8f873_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6a1390ee2c37879f515d27bad7b8f873_JaffaCakes118
Size
19KB
MD5
6a1390ee2c37879f515d27bad7b8f873
SHA1
1e6a5c12f4d485d6ce555e08c70ec960e6cb0070
SHA256
071012ab81d1a5facb029c0dc70e6dc0c137486838fa58c12234dc1eabadb3cc
SHA512
d9c05a3fb0ea99b55946ea5d96c85c8a4223eeacac6427c98b1ea761df89a9ca951d80cc791373dedad0befac0b705053f00f7e19419c7f2fa8798001cc75cac
SSDEEP
384:caFWP+BbP4UV/pL6Nwc7Cu1hGU0s0/YYF5dFrSQgSc1RHnrxG:caF0+JtBWdlhG96ORrScaRHnrxG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a1390ee2c37879f515d27bad7b8f873_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F1
F2
F3
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ