fff
mmm
sss
Behavioral task
behavioral1
Sample
194b524af202bfb3fb3f2471b7762b59_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
194b524af202bfb3fb3f2471b7762b59_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
194b524af202bfb3fb3f2471b7762b59_JaffaCakes118
Size
12KB
MD5
194b524af202bfb3fb3f2471b7762b59
SHA1
22792bc3fa804ba650866b9870cf1a3630651f50
SHA256
52f531db08dfc3b9df0b8a11749c8e1587cc84a457a21cc461580fb61748d7e2
SHA512
79e20ca89c2820e9b5a0a96a6d067b18887ecf2226361325a05318a210e38d947425b354ae3878a829eb76ec142d1555eaad0413137c7b2eb1d535226f175e66
SSDEEP
384:TjHEpIuwYMek9pSq8QHaNJawcudoD7UH:HkSuw3kRnbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
194b524af202bfb3fb3f2471b7762b59_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE