re
xuvyvzoa
Behavioral task
behavioral1
Sample
ed066d1d48addee3848d1d88142faf8c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed066d1d48addee3848d1d88142faf8c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ed066d1d48addee3848d1d88142faf8c_JaffaCakes118
Size
52KB
MD5
ed066d1d48addee3848d1d88142faf8c
SHA1
8a0c57612bb9b35f4708a1bf6c9660d4f151ac68
SHA256
5c2b1b330faafea7ade618d4a00588783e61d074472176693fe147704c666fc3
SHA512
e06022a43192859031ae33ced92d64fa560b54f7a150fd4084750c4d2b6865b70cd2d68f21e936d2ea927a6cdaf6afcc00f35d0dab7f2666ad9adde6400ef2b9
SSDEEP
1536:WFpGZqmnKkvRw+qe70873YIqc+3RL4MNSnouy8bd:WaqmLw+G87c4Msoutbd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ed066d1d48addee3848d1d88142faf8c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
re
xuvyvzoa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE