SetDIPSHook
startNow
Behavioral task
behavioral1
Sample
092041de8e640077bec4c4354867cfe9_JaffaCakes118.dll
Resource
win7-20240729-en
Target
092041de8e640077bec4c4354867cfe9_JaffaCakes118
Size
19KB
MD5
092041de8e640077bec4c4354867cfe9
SHA1
3917a5e4f921ea2184dc3c6b62c21a6671db53ec
SHA256
e31489cf7479fa1a2a6101e7771e4f619d8114f94ffb69560aa931794ea2b23b
SHA512
4bcaf12c38716e38c8027307285c7f590197703b1b7e94ea8c182a26c10da5ca2592eff561a578c66b5524e3cedd64c156b7a15b2ed470f7cf68026d3e47d954
SSDEEP
384:VWGEPUZSwPqPS3VMRn5NHAIjxnYsNZuweBG8tM:VWGcwSPSlWLAIjmsNZuzGT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
092041de8e640077bec4c4354867cfe9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetDIPSHook
startNow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ