Service1
Service2
Service3
Service4
Service5
Behavioral task
behavioral1
Sample
09d5ffd6b36fa50c4ea980b76751c383_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09d5ffd6b36fa50c4ea980b76751c383_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
09d5ffd6b36fa50c4ea980b76751c383_JaffaCakes118
Size
326KB
MD5
09d5ffd6b36fa50c4ea980b76751c383
SHA1
dc4e298f4e50ff387040e375c1dce93e6443b6b8
SHA256
8c89ba654d3f4662af265cf96153d602f59dd9605882d4243318d9bf625c8245
SHA512
b71f7928b5a067bc6d6654747c353724f3c77a9886af21338b95f1c504695672f2fae791642f5103dab07143066bda595295823a37dcd74d3e402c351fbb90a6
SSDEEP
6144:i6lg7oawVMvg6P7SEiUcQpXJxpU9k9P5oGav:NCjjniU3JY9kDoH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09d5ffd6b36fa50c4ea980b76751c383_JaffaCakes118 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Service1
Service2
Service3
Service4
Service5
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ