GetNewInf
GetNewSock
Behavioral task
behavioral1
Sample
01cd87ebabd802f9b132350c824e8278_JaffaCakes118.dll
Resource
win7-20240903-en
Target
01cd87ebabd802f9b132350c824e8278_JaffaCakes118
Size
406KB
MD5
01cd87ebabd802f9b132350c824e8278
SHA1
defd4a7787317f07d28109067e8f1a5157d31fcc
SHA256
7b2ba32d5cc047a19ed1062682536c3f7a25c52c915c8888dba60a6b7abde64c
SHA512
6e230b0fa1bd0587f8136fb10e9689f349b0b68902cc25964f94467a233dcbf3fdcf8e3e4097ad913e6b251a4947a7b9189dd1ef64ae4bfa4caff86d4cfb895e
SSDEEP
6144:a9fWhKrrpn7OHZfio0z3EXecgqMImSixhY1CS1YelvzuybtnmD33BbCkMvFzgL0:yfWet7U1b0AeyMHSiY4S1fbID3RmkG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
01cd87ebabd802f9b132350c824e8278_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetNewInf
GetNewSock
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ