CreateCnntView
FreeCnntView
ȡ����ϵͳ����_����
Behavioral task
behavioral1
Sample
6f9a60d016afad695ba5f6c05cff508f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f9a60d016afad695ba5f6c05cff508f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6f9a60d016afad695ba5f6c05cff508f_JaffaCakes118
Size
122KB
MD5
6f9a60d016afad695ba5f6c05cff508f
SHA1
da7964654ffbcd69dd091500247cfcf10aa29c14
SHA256
48d2bcdb789af047d37969903c025192b6cd4c9511b6d70e69a1638364aaed69
SHA512
ed1317339046be463460e36c6e9b64a96996929105fdbc1caf7ebd4e7677bc0c1b7f96978ed723d1bf7e61df8f5d2f00bb283bdc97711b3750fd1d4399a1adbd
SSDEEP
768:kulw6q7VyWUQ5qRDQuUcHpoQRklJsljGk8hihWLok1hAcQ:k56AkWUQIRD/UcHpoQa6j78hihWl1NQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f9a60d016afad695ba5f6c05cff508f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateCnntView
FreeCnntView
ȡ����ϵͳ����_����
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ