ctxnh
fxuvdtqwup
gjmmaihrn
Behavioral task
behavioral1
Sample
0e45023b2193addffb5028be4dcf4596_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e45023b2193addffb5028be4dcf4596_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0e45023b2193addffb5028be4dcf4596_JaffaCakes118
Size
272KB
MD5
0e45023b2193addffb5028be4dcf4596
SHA1
26133906c2544386c261ccfd5d15aa8c9536905f
SHA256
677d83ce30ef9a6e0759e9b16dbb7f74352b46fae9dd76c9d5c9482489494341
SHA512
cea7a3248ef2fa23a4c5cd9b4bbbbdbf7f2fb41ff255bc713e9334d1dd2ed92b75dfa7bfba1ddb652ce4395cafd588293d107387dfdc37388ca76f8164a295f3
SSDEEP
6144:MF7xsSR/TnEl0Mk4zM7YKpIo5UNOLA/R00Z+IcdMoSf:SzR/TFkMB5UNOmRxUooSf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0e45023b2193addffb5028be4dcf4596_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ctxnh
fxuvdtqwup
gjmmaihrn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE