CloseArchive
ConfigurePacker
DeleteFiles
GetPackerCaps
OpenArchive
PackFiles
PackSetDefaultParams
ProcessFile
ReadHeader
SetChangeVolProc
SetProcessDataProc
___CPPdebugHook
Behavioral task
behavioral1
Sample
eeb83b2be42187450a743d41f8050215_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eeb83b2be42187450a743d41f8050215_JaffaCakes118
Size
38KB
MD5
eeb83b2be42187450a743d41f8050215
SHA1
669e91ed69e96ecb2186a4be3c153cfc3b33f43f
SHA256
d98bf6e794e883b10be01e0f8b64d6ea3fa8edb339c080d58759da02adae8c59
SHA512
9ef1be2c04982cfd67e35c6bf8f4eb4c84954c34cc4b648afc76cdcabb4524875610c61520975d160217282129d9973c041b3c8b4c17090548d1b98a41be481f
SSDEEP
768:DUaoASOhoOzUPXsEmcpAgu41OjL/pQJEbH09v0sJXAf3S0K:4kDlELfkmJaU9p9Av
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eeb83b2be42187450a743d41f8050215_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseArchive
ConfigurePacker
DeleteFiles
GetPackerCaps
OpenArchive
PackFiles
PackSetDefaultParams
ProcessFile
ReadHeader
SetChangeVolProc
SetProcessDataProc
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ