Left_Double_Click
Left_Sigle_Click
Middle_Double_Click
Middle_Single_Click
Right_Double_Click
Right_Single_Click
Behavioral task
behavioral1
Sample
dc93c5a6fc44af926d4b8c23a9d355ae_JaffaCakes118.dll
Resource
win7-20240708-en
Target
dc93c5a6fc44af926d4b8c23a9d355ae_JaffaCakes118
Size
10KB
MD5
dc93c5a6fc44af926d4b8c23a9d355ae
SHA1
0f39445ad018806992ba9c312264a1252a39e433
SHA256
e64c3d2f2e04d8884305a6ec6164a09f6f15c8c728aacae1a7d90c63c830af91
SHA512
7ce4e67c0e080b22c3258e52b88876c44a130ee44db0a298e58588037db4bafc62769c82b8ade2b4479624e6910e90674e01b76588bcbacbcbda9eab605c3804
SSDEEP
192:nRvhWNmM7ajsNMH1kgpXFhXPCyMp3R8J1PbwPFN7l2va+VEdfxWULT:RkNmM7ajDGMhqyeR8JVwPb7Iva+VEtn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dc93c5a6fc44af926d4b8c23a9d355ae_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Left_Double_Click
Left_Sigle_Click
Middle_Double_Click
Middle_Single_Click
Right_Double_Click
Right_Single_Click
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ