avvx
kill
wdmd
Behavioral task
behavioral1
Sample
fc538dd74d2e872144b4be0ffc1172c7_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fc538dd74d2e872144b4be0ffc1172c7_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fc538dd74d2e872144b4be0ffc1172c7_JaffaCakes118
Size
12KB
MD5
fc538dd74d2e872144b4be0ffc1172c7
SHA1
d9f1c3f805ecbaef3817777340f2c0aa46226f6c
SHA256
9813b3d6a63afa75eb5ec7868e4c4bd83f0c0f8a253e6475bffccca9424637bf
SHA512
8b7dbfb5fe8eaead39d41e4ba6765f844b6031f81e204d55c137f837dc5d300342ea25ced43a5031eacafc5354c5a06efbbc05f3ec12358a9dd731c8d50b1d6e
SSDEEP
192:c8eUwgbc0N9DbV/UrnVvGzXxP6GPgs8Dzot1UHAbBimfZMKzrsEhvCI:NeUwglfVcBGxieJh44rPsEEI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fc538dd74d2e872144b4be0ffc1172c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
avvx
kill
wdmd
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE