install_atom_map
install_rdf_db
Behavioral task
behavioral1
Sample
710804a8e9962d2b32af4a88487de705_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
710804a8e9962d2b32af4a88487de705_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
710804a8e9962d2b32af4a88487de705_JaffaCakes118
Size
53KB
MD5
710804a8e9962d2b32af4a88487de705
SHA1
6f3bad8a5d7a06b24af8be995865d083c196db55
SHA256
71e68d4f356e67bdcedb4b963b1940dd1a97f30df338d22495fbf27a395b4e57
SHA512
372baa7e37dd57bdae1143c8aec80bf093b917d8817c09a0f1a40a228928ae2b55d0d71fddb34446bf64915f1f93f50bd03068aff982e1fc1e338d6cc3fdbcf1
SSDEEP
1536:ymhEvQ5x7VvM/JXsG593T4TC4ll/tSkGKMBr:ymhEvQ5x5voF59Dtm/DLMB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
710804a8e9962d2b32af4a88487de705_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
install_atom_map
install_rdf_db
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ