dvo
jjhxfbksvc
joooo
pa
Behavioral task
behavioral1
Sample
b92e7caed434bd3e2e9029876a167336_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b92e7caed434bd3e2e9029876a167336_JaffaCakes118
Size
300KB
MD5
b92e7caed434bd3e2e9029876a167336
SHA1
8910f8e4a6654f91ff90dcf7121a8d6ba9b3b446
SHA256
90f3e8078121d5cf8f5811741225eb04ded61228e0c7f15fed2854bb47b4538e
SHA512
f245b16d5e199c8b73c8c400d5cc27a3eba0240ea4848f914fc8d58e3ab8554513dcea31942a5be6fefb286847f2d3f19b38e4fdf03209c94d8c52292114f14c
SSDEEP
6144:AzZeeWrtei+l5HMRXVN8UzK9KhmEoRPkKBy9G9MlSP3uq4r0sBRV:Re0z+l9Mj9O4hLoVCl+3ur04RV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b92e7caed434bd3e2e9029876a167336_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dvo
jjhxfbksvc
joooo
pa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ