jjj
kkk
xxx
Behavioral task
behavioral1
Sample
d12dc555127feb8cc98ad7cd40d14f4b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d12dc555127feb8cc98ad7cd40d14f4b_JaffaCakes118
Size
11KB
MD5
d12dc555127feb8cc98ad7cd40d14f4b
SHA1
bf888e410be00e2b88c3e12dba935dec963272ef
SHA256
95bbeae11b041437b763f91e66f46b193bda421449a64024305d8ac053a6dcda
SHA512
73dbeb48cfb22366c13fa9f5d7f3462afe5b98893cf64109e6f37bec6030f0d9d0233d4955d4e24f131d86eb1f7600ee383707ed8b7d88bed3286a3d1c7b73be
SSDEEP
192:pWTOjrcTP/p5SO8BwG6CMqVDFW8VfB1OT9o7CxJqQLfbe2iQh:pWTQQHmpBwG6CMX8B3OZo7+qEfb7ph
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d12dc555127feb8cc98ad7cd40d14f4b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ