jjj
kkk
xxx
Behavioral task
behavioral1
Sample
d4566434b37a0c3664e29b96d46717c9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d4566434b37a0c3664e29b96d46717c9_JaffaCakes118
Size
10KB
MD5
d4566434b37a0c3664e29b96d46717c9
SHA1
cb21fb6cac684bdaf485453346892e478f52473d
SHA256
46b7311c9303789265ca720552141d5cf59d7697ffe3681bfd0d7a538c550140
SHA512
d16d36b48eb3ff75db3b63a3ec6f1e26c12af44c6be71e1be0b408508e213d10e8a3afbb60db0c96295fa07a88da4e6fac29d0eb2991bb6ffd302b8aa8b64329
SSDEEP
192:A3kH3WOve2pBUaDMXeI5tlktJn7l68qaTZypwA+aHogIov7GQxz5j0wX:6JOGipQeIvmPBj7T41+INIoDGil
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d4566434b37a0c3664e29b96d46717c9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ