jjj
kkk
xxx
Behavioral task
behavioral1
Sample
a505b700d66e9fedd7dc575fe2fcf08b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a505b700d66e9fedd7dc575fe2fcf08b_JaffaCakes118
Size
11KB
MD5
a505b700d66e9fedd7dc575fe2fcf08b
SHA1
08329867f3352fcc58b5a3b100327d877c84f288
SHA256
e9ebc72cf52519fd0900810f2431ace4e8231065618ecd4481b7297f80a70dbe
SHA512
cb445fa0025564fb94beb26becd5c0792c2076fa1e974ecbde79f3f921c56781d49fae174161c38c547bedcf952de64cacff56a714694dcfe313a18afd909889
SSDEEP
192:FRc/zkTlVhdcHwSqoAjW14mgAeSCK+aLAuPpPIQ/NGE:FgoVLQwQ14mtRCK+akAphEE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a505b700d66e9fedd7dc575fe2fcf08b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ