dvo
jjhxfbksvc
joooo
pa
Behavioral task
behavioral1
Sample
cef19592d83908a63ce0fb810ec2a898_JaffaCakes118.dll
Resource
win7-20240729-en
Target
cef19592d83908a63ce0fb810ec2a898_JaffaCakes118
Size
36KB
MD5
cef19592d83908a63ce0fb810ec2a898
SHA1
b6dd8a325fcfa99a1db2a44f0436455d4b7eb5ac
SHA256
cb2f0ad854ec3b8b696d6813aa656bf7c226f696a3a4d71af2b03bb40ae95e05
SHA512
40ad85c93822f504acf050430cf8db7a9f3e44165e54dea4f6b89da6fe8853c5d38f485e97b39ffbf13b723a3067de12cd4dc7717cecede8693f75aa4781ba95
SSDEEP
768:l+jP9hxuDifZzD8pp24XxxMrwa9xEmpSWyxlppVcODyNBqv:l+jP9hYiflD8p9XxxM/9us7yxlOOuTy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cef19592d83908a63ce0fb810ec2a898_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dvo
jjhxfbksvc
joooo
pa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ