Install
InstallService
ServiceMain
Behavioral task
behavioral1
Sample
851659c78f68d57ac5b4f7811b3bb8ca_JaffaCakes118.dll
Resource
win7-20240705-en
Target
851659c78f68d57ac5b4f7811b3bb8ca_JaffaCakes118
Size
9KB
MD5
851659c78f68d57ac5b4f7811b3bb8ca
SHA1
d33747d2343f323c811d9d2575db10918ab3911d
SHA256
f2bfa37bafb46231492019b9a62a097302aa622cfb4270dd379233abdb1d10aa
SHA512
6c2ccb150ce700cc4ed0239de4ffd6537874731183b7006a5f7b5d137a1ca0d9379b3986dfb6448bcd6958c4e503892e453d57538edafcd599c3b2f03aeb1825
SSDEEP
192:pLyWDpbMnei9EQ9clYHhPlhUnOnzHu6+WZJ8qDn:5yWpMe0Eo1BPfUOnzHb+WZJ8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
851659c78f68d57ac5b4f7811b3bb8ca_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
InstallService
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.