compress
uncompress
Static task
static1
Behavioral task
behavioral1
Sample
0e07c2e08a147b74d59738d86a5cf53d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e07c2e08a147b74d59738d86a5cf53d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0e07c2e08a147b74d59738d86a5cf53d_JaffaCakes118
Size
214KB
MD5
0e07c2e08a147b74d59738d86a5cf53d
SHA1
3eabc919049c830a0b8bb686a8a64edce600b170
SHA256
173f2aef3c24d4b100fade530b4fb35b0230ee40ea7eb2223b8787081bf04ab0
SHA512
8684848305ade81ff38590a744411e2ef7de8f3b4e62af47ce14ef7980a45f4bb87b815faa6e5f192ec0d1391b668a87bcac4271c81a1e8e8e7e5d582e99f9ea
SSDEEP
6144:KGtmxkEKTSPCqnwkFe3PEB1M3QCHu8Uvv69m:Vg6TSPXnwMPbMgwqX69m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
0e07c2e08a147b74d59738d86a5cf53d_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
compress
uncompress
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE