MySysDir
ServiceMain
copyMe
myDir
panga
setup
update
Behavioral task
behavioral1
Sample
a5b55ccd3c38869e729b76864866d751_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a5b55ccd3c38869e729b76864866d751_JaffaCakes118
Size
282KB
MD5
a5b55ccd3c38869e729b76864866d751
SHA1
27992a4211eb97e5beb7458e23fe142a042d25cd
SHA256
b3de373f02299a467b1fdc2b7daa414ad028beea6635d159897cbcbe10b9ded9
SHA512
928b69c210de8e11da6d093c6bb97a9bed19942314ed3f5ea975934cf539f1ae7b70e51d112c9f89a5a4265553ae7bd3bc2d302295b767a7bde9175ed25fc5f3
SSDEEP
6144:pFvoCUpO9f24cQQ8lfqIvDwhoC4dKPVAYOSHrq+Tb0+ulD:D/EOBPcevvJCvbpHrrn0V
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5b55ccd3c38869e729b76864866d751_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
MySysDir
ServiceMain
copyMe
myDir
panga
setup
update
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ