PluginMain
PluginMsg
Behavioral task
behavioral1
Sample
8d84c3c54970d50a2be7db69cff22a45_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8d84c3c54970d50a2be7db69cff22a45_JaffaCakes118
Size
69KB
MD5
8d84c3c54970d50a2be7db69cff22a45
SHA1
c1a7af0cb521c6126c37f546613eaefcbfa5c5e8
SHA256
18b44c49242231603ea89fe442ef0bedddbcaf66e51158ae049717546733e9e3
SHA512
04ca83a321365ac004fb630aef1666ab30b2fa7c09eafa2445c8920df3837e5c415de24addfe8ea43f8d6f9e15daa354a5cf3520462c9bd1a5ca3ea752125979
SSDEEP
1536:E3IoG7y1KzG7tsen/zEC1dAhrmJMcsbETb2v5BP38TLIb+q:EFKAztsenLpDAhRXYTaP8TY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8d84c3c54970d50a2be7db69cff22a45_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PluginMain
PluginMsg
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PluginMain
PluginMsg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ