CPlApplet
CPlApplet
Behavioral task
behavioral1
Sample
b787f5561cfb2c1bbbe3c6c4dbc798b8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b787f5561cfb2c1bbbe3c6c4dbc798b8_JaffaCakes118
Size
319KB
MD5
b787f5561cfb2c1bbbe3c6c4dbc798b8
SHA1
457f208979bf91b09a612fa082b60bdb77f27a9d
SHA256
95ac84c767ea5d2bfc75f5cdde578b6ff8cb1d79e2c95c20ef5e653985c411b3
SHA512
58fba23fa2235abd5ab5fb6479b37e4c8b3a385ea3b51271e8b5c061537542add6318b9d67e5f292fa94469e285fef566f7a99d4f658250ecde354357cb8d6c7
SSDEEP
6144:whdO0AcWSj/PdO8RrlJ4fwO0yEoqXnHJuDzw6zZutKQGI2IfJdBISmhZ3G:wh4cXVlPO4PZuDzw6zwtKHIRo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b787f5561cfb2c1bbbe3c6c4dbc798b8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
CPlApplet
CPlApplet
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ