vlc_entry__1_0_0e
vlc_entry_copyright__1_0_0e
vlc_entry_license__1_0_0e
Behavioral task
behavioral1
Sample
785dca92a612acc85bede7dfcbcee367_JaffaCakes118.dll
Resource
win7-20240704-en
Target
785dca92a612acc85bede7dfcbcee367_JaffaCakes118
Size
18KB
MD5
785dca92a612acc85bede7dfcbcee367
SHA1
b2cab6ffce35b0b4b3f2975d6e25b3e28aab2afc
SHA256
1d23d30e28692c18c8a049f3fda1012ecd73d43368ac16181e91f17669b13802
SHA512
decb9794dce8a197cbe1e1591e77245c0158334a4e705897234b81fb67187415d16f6282e88686d06bd1c05e15c347e9acefc17be365a6c5cffd5e7f11f359fa
SSDEEP
384:j1OMyFPh/i5VnkU2IEhBakvX0vD2g5HnN6YJ/jEQOD4:j1pyth23Ehz+6glN66byD4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
785dca92a612acc85bede7dfcbcee367_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
vlc_entry__1_0_0e
vlc_entry_copyright__1_0_0e
vlc_entry_license__1_0_0e
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE