jjj
kkk
xxx
Behavioral task
behavioral1
Sample
ffa67a58cfa4bbcbccb1741c8b386837_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ffa67a58cfa4bbcbccb1741c8b386837_JaffaCakes118
Size
11KB
MD5
ffa67a58cfa4bbcbccb1741c8b386837
SHA1
a273fcc9b474562f83ed8a938ccc141b3f7ef197
SHA256
7bb1ac353903a1f2d27fe866d8748b1837c09770f1ee2ec891ce70912d0e5c8e
SHA512
ab8a7eed1e17f4028405d6ff338940a53f65ec63c79ca1bad20e062ac3390e39b8eb124f473c7b799593ece086dceb821b5db8e7c74b212b34d8284c5eb3c2c9
SSDEEP
192:62pPpFP4FIG7u9LxggTXO74lNX9d0zO2i3+vOph1/+bar9:68wu9LxfTXOklV9d8O2i3+/ur9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ffa67a58cfa4bbcbccb1741c8b386837_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ