jjehzoa
vabefpxrisb
Behavioral task
behavioral1
Sample
26a1583f12da7bc09f6a3bba87377f1b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26a1583f12da7bc09f6a3bba87377f1b_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
26a1583f12da7bc09f6a3bba87377f1b_JaffaCakes118
Size
93KB
MD5
26a1583f12da7bc09f6a3bba87377f1b
SHA1
28c71ba7a4ee32e01ec227bd96b45c8b15a00a2b
SHA256
c0c1818e9650f2db42f26d5945745a67d8c1107c2d42341def288c460abd01c6
SHA512
2c528718c5e979d893987641d7b4554a355981960d63251ada6a7d0b42efa0e2454efef534042f04a0f5da48d5caa4b435e2e6eaf6e0a02ce362b9aeaad8e74d
SSDEEP
1536:Dnv5Bg/PLd9JjCIcDziH5/wrx9c+PMLjPcuR7hsdXaIfV4Vh/F7nouy8vd:6Ld9JZEY/QXUUuPS92VlFjoutvd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26a1583f12da7bc09f6a3bba87377f1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjehzoa
vabefpxrisb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE