jjj
kkk
xxx
Behavioral task
behavioral1
Sample
fe8dab3606da207fcb594dee6f3f448f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fe8dab3606da207fcb594dee6f3f448f_JaffaCakes118
Size
10KB
MD5
fe8dab3606da207fcb594dee6f3f448f
SHA1
e2269e3afa0c34bf99e5774dff841643970ebf40
SHA256
8f9c5c440facb367ffcb3b8355e93748a8c03e143412d137e28c3d761d91972c
SHA512
9e709860170ef6693fb6369555cd61f4a1066a70ee3f2b99a1d4adee822145f159133f17cae81f41029d047208effe8e442f33eeb0f1e185fee4a0005a2850ab
SSDEEP
192:RC7CXYcskmSEFioCJDjncIauPcyZEpRubWrDyhSkb0:RjYc+JioCmIafBpMbsyhj0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fe8dab3606da207fcb594dee6f3f448f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ