GmFunctionType
GmInitPoint
GmRecvPoint
GmShutPoint
GmVerSion
Behavioral task
behavioral1
Sample
6a29c81906c78ddb42cbbdbf61dd83d8_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6a29c81906c78ddb42cbbdbf61dd83d8_JaffaCakes118
Size
5KB
MD5
6a29c81906c78ddb42cbbdbf61dd83d8
SHA1
0a74cf410ad0567bf960327784ae6dcc080ecd26
SHA256
1b7678fa7a38c8a837e76aa1fafcb4d8dbed7c57d45a4d4b37ac56f5c0fc2380
SHA512
53f6a729f8412da22ccb1f5cbaf36ea3fa8bf4ba874285c4f6e53e89692579f33feaf5e3e5714e93c728f930d3887a37218f774d37182ae9502a02be64029ec5
SSDEEP
48:KtZ6+IQFKZKrufIWryv2sv3Ae6Hx4neYtx4LYeqUxmzqa1offdvkYevYB5GxdkMW:a6iYfItvcxcX40Ux5a+ffdrz50kMVSc4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a29c81906c78ddb42cbbdbf61dd83d8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GmFunctionType
GmInitPoint
GmRecvPoint
GmShutPoint
GmVerSion
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ