GetNewInf
GetNewSock
Behavioral task
behavioral1
Sample
05e936d4513f56d68566da6d319f2fe2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
05e936d4513f56d68566da6d319f2fe2_JaffaCakes118
Size
406KB
MD5
05e936d4513f56d68566da6d319f2fe2
SHA1
54e44136f743079b676e94ab2fd1c42401a9bd0e
SHA256
71f53ffc09f6d5efd2e94e7d47e1229d8df07f26e7238898c472855c810591b6
SHA512
d542ca7d0943711d5d79d18abefbe65b92d9f18cfcf7e12be817c001bdb75574c259c9da914c1a682b2472333c36daca3e34b1e1c0b3767f298e134481821c19
SSDEEP
6144:DisbAEawFeehSqRd5kP23XzHGG0gXbl28j7yGJPc/LWOXM24zn16oIKEaj/eWtf1:Lb+Y99XbGnwR28vyG9cSTH16oT5tfj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
05e936d4513f56d68566da6d319f2fe2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetNewInf
GetNewSock
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ