ujhkk1
ujhkk2
Behavioral task
behavioral1
Sample
76ec3e073e505d2bc2f45a2ac9a89253_JaffaCakes118.dll
Resource
win7-20240705-en
Target
76ec3e073e505d2bc2f45a2ac9a89253_JaffaCakes118
Size
21KB
MD5
76ec3e073e505d2bc2f45a2ac9a89253
SHA1
145c9421fbd6e7a65fa04a07fe3ce0fa600fbc4c
SHA256
ce5780e6c3db7bdb08b7454e34452774b39b91d7c930feb73d5f3092d2689011
SHA512
cd7139d9f992a307675e552d986f29927cc24e5812cd5faf8306bbf406759e3017b5fe8a391b58308880d8bb1e7613905c7687bbd1b60fe4b4b1f9815ea19ab2
SSDEEP
384:KfcAV2eBCgqlgpH9ubPHDjGJUXRTOAhJYjiIQPrAsXR93KKpkjG9a5vYlAQE:MccHAlgibPGJiTOA3Yj2rxXba26G9UgS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
76ec3e073e505d2bc2f45a2ac9a89253_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
ujhkk1
ujhkk2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ