fwor
nieb
Behavioral task
behavioral1
Sample
1125ef2ba1024c44d104537d76581e17_JaffaCakes118.dll
Resource
win7-20240708-en
Target
1125ef2ba1024c44d104537d76581e17_JaffaCakes118
Size
288KB
MD5
1125ef2ba1024c44d104537d76581e17
SHA1
c9eb0e949cef8b4d7a4b1fceb0025b6310bdfed8
SHA256
c5f7e587d1f00540c7203e293053053fc3854a9da49cd10843938a788a7278e5
SHA512
1179615ad66adeece4c0feab848861f9dce63456b93b03cea3a8270f226983e2d2a47e684faa65033e9b8e90e8b25b19bac0de2f96c8f411ef6096b2aee4f08a
SSDEEP
6144:xqS59p2GIk2DeFqH7N0UKgxxLsW10g0X3czA+9MAZs1t:D5K5XbN7xYW2g0X3czA+9Cb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1125ef2ba1024c44d104537d76581e17_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwor
nieb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ