jjj
kkk
xxx
Behavioral task
behavioral1
Sample
b7f79da095dd8f597972536375188879_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b7f79da095dd8f597972536375188879_JaffaCakes118
Size
10KB
MD5
b7f79da095dd8f597972536375188879
SHA1
ce2bc9518bee619441bf2832f3ba763939087f83
SHA256
8af94388b8ce9666f6ed656ae390f61cc352652b584f7643a191c38b5c17b787
SHA512
20068d39f6128d5dab78ce58145d32f9d950c15579329376b4fcf64b99c7ecc149e2f79a1f886ffcadd802ed960528e805de9ada7ef7b6a7de46578ca00c2f6e
SSDEEP
192:tKHz/htchO88FHLaXENpCWFfW+Bq7QbevoK19lIsi+O5ovTXKmGBj9gLN:QyCHgENpa+cMbqesxO2rPwu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7f79da095dd8f597972536375188879_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ