CloseFilterInput
CloseFilterOutput
DIALOGMsgProc
FilterGetFileSize
FilterGetOptions
FilterOptions
FilterOptionsString
FilterUnderstandsFormat
GetSuggestedSampleType
OpenFilterInput
OpenFilterOutput
QueryCoolFilter
ReadFilterInput
WriteFilterOutput
Behavioral task
behavioral1
Sample
d547339ab29caeb3447ffbd27f63abe2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d547339ab29caeb3447ffbd27f63abe2_JaffaCakes118
Size
20KB
MD5
d547339ab29caeb3447ffbd27f63abe2
SHA1
f2e3911b48b0031d73d249efa1204162a418f013
SHA256
619940b8c39ce181b0f52cf840071e138cbf82506ec3a6caf8e5492191c97596
SHA512
c93f3c58479d2e9731e492b8a84fb088f8ea409da63a47b7641e096aab29498e2330306fef36fd859e4eb53f53bf60e8be603f142a900a6717338c043ca440ea
SSDEEP
384:i017Uobj+HNuIpSxVdnJ7vQtKSFhvi8ljybcUL3AMGvqL33rYg3/0YQ:/N25SFJ0iWjRUzA5veaB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d547339ab29caeb3447ffbd27f63abe2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseFilterInput
CloseFilterOutput
DIALOGMsgProc
FilterGetFileSize
FilterGetOptions
FilterOptions
FilterOptionsString
FilterUnderstandsFormat
GetSuggestedSampleType
OpenFilterInput
OpenFilterOutput
QueryCoolFilter
ReadFilterInput
WriteFilterOutput
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ