fwor
nieb
Behavioral task
behavioral1
Sample
25248a57e78380953b6d376b2043f359_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25248a57e78380953b6d376b2043f359_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
25248a57e78380953b6d376b2043f359_JaffaCakes118
Size
288KB
MD5
25248a57e78380953b6d376b2043f359
SHA1
34a1a35cfa0708125873ac8f63ef62c957c55cde
SHA256
71c701efcbe8ef40a16f176785146e4620d62fc0455c2a2cd6ba9125b62793fd
SHA512
973b407ca9f95332fa4f0cc76ccea2bb6071f752cb7e9bbd79be580f32b810fb5450f4bb3215c292a9e9a8556391569b3de8d5e15fea1be4269853ddce2f45be
SSDEEP
6144:nlgI0x+A008W86/OeUW7EJ3a2iJaLDOM0xDRJ7Ji8LH/S1Fn4qbx:SI0xthfc3cJjvJRzS1Fn9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25248a57e78380953b6d376b2043f359_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwor
nieb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE