fwor
nieb
Behavioral task
behavioral1
Sample
f104825fc3d5ba6b00e06c1f7c1dcc00_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f104825fc3d5ba6b00e06c1f7c1dcc00_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f104825fc3d5ba6b00e06c1f7c1dcc00_JaffaCakes118
Size
286KB
MD5
f104825fc3d5ba6b00e06c1f7c1dcc00
SHA1
49f9f7416852e16419a3b163456467f5803ad249
SHA256
c6e8c270cadcbfd97f20b76d410f2037c68244036a06640d6240ded153c6b7ed
SHA512
6cd8c59808bbe6871a0354dbb4adc2420f857e1ae1314c6804a1d87b0b09ce88ab960b520d6f782570818a3e360f6a8a31286b3b8baa11d44dc1367a50c7876e
SSDEEP
6144:64KyzV17OCXCAgUADhrPjpg6wnQjixWuQrkqcryZOV5cNem/VQqCUoS/:6mzV17OgUDkV4iZkKryZW2NemdXoS/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f104825fc3d5ba6b00e06c1f7c1dcc00_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwor
nieb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE