install
load
Behavioral task
behavioral1
Sample
39a3b47fd80aa1a5680294d8f7d02d67_JaffaCakes118.dll
Resource
win7-20240903-en
Target
39a3b47fd80aa1a5680294d8f7d02d67_JaffaCakes118
Size
59KB
MD5
39a3b47fd80aa1a5680294d8f7d02d67
SHA1
017519d7f1d05d4a7471cf21e218af874d2cf8d6
SHA256
12c651d7947a40022b4fa956d7a2f637816a8d2b41ce8cb9f7800180d8dde630
SHA512
e1d7749ba71e93f2005a0b045f3039b6203e33f64d3a3265a5349b3dd3686f9ccb3945d30d388dac213018d93e6ea9737e9f90d6650f4cf83c1805349a1531d6
SSDEEP
768:t8jQ2elrbZ1gj9DhISXx90bczujCpTWi2E51UjqQ2Um9Cb0HSp:CjQ2elrsOS8bczuWpTKM1UjUCQHSp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39a3b47fd80aa1a5680294d8f7d02d67_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
install
load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ