jjj
kkk
xxx
Behavioral task
behavioral1
Sample
6f8b0ee297fff815f98a7b401900f779_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6f8b0ee297fff815f98a7b401900f779_JaffaCakes118
Size
11KB
MD5
6f8b0ee297fff815f98a7b401900f779
SHA1
a81ee0ca3a7ac6e5daebf43cbf68ac69c4340f93
SHA256
3301c63c004ca0cb060a1a1eb54617ea41d8a862f569aa3dab79b75628c31d40
SHA512
c98de0d82529571c54f60698be282f3fb1eb39404db355a50495e1a911355d38d3c2a2bb907229a737ee0897ffeac2950a0d7a79b266bed078100d60f697c327
SSDEEP
192:CXFunM+K6CAr4A0qZshdqVzMVPVK90O98K5iEh6XCzHCa:CXFuM+hMA0RqVzyKb98UiEEXOia
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f8b0ee297fff815f98a7b401900f779_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ