Install_Ex
Uninstall_Ex
Behavioral task
behavioral1
Sample
a44b5f3d7b8b7ced49f5bf0d3e737917_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a44b5f3d7b8b7ced49f5bf0d3e737917_JaffaCakes118
Size
6KB
MD5
a44b5f3d7b8b7ced49f5bf0d3e737917
SHA1
173757c4d2c6e0a39672fbb6acb4d2f923b4aa5d
SHA256
914534fa5468e94cc4dced052d90cbaae210a6c147a1aca141dfe760b27b1160
SHA512
c78935dd93b54055de3a592141453eceb5645f8d694fcc3c3b5058373153c5c35da3508c1c8a6da70a403247a8411ca7fe399c45a4a2f31e12fda001688c0673
SSDEEP
96:OSFgCpoXYgz1Ry9+etptJ0PHR4FFDniyIEZNtHa7h8VNak:FXpqf8lKHKFFLibExHkuNak
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a44b5f3d7b8b7ced49f5bf0d3e737917_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install_Ex
Uninstall_Ex
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ