l
myxxdxjtvbp
Behavioral task
behavioral1
Sample
263b3cea5216dc9066cb2fe0a6e98816_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
263b3cea5216dc9066cb2fe0a6e98816_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
263b3cea5216dc9066cb2fe0a6e98816_JaffaCakes118
Size
282KB
MD5
263b3cea5216dc9066cb2fe0a6e98816
SHA1
4188ebbf25eb4cdcbf4a2019c9530a8ddfb9b9cf
SHA256
143c502cc850528e516588e2e39903ea442ecddd7435cdb654a8f1c28180be5c
SHA512
5c759d416ffc5404f3b395c8218ad8492f3f5102357881023151e388bd99815e26f2dbce0e5395f4ae35fada1a2c1fbd0b83fb7a831302c59f20d64e4bcd04a3
SSDEEP
6144:XArRC6SxoN2LNofk2wdSpUl7Rs2gIERXcKHlLduLutReNmrhbfP04g51RXoSQ:Xf6SxAmNoBqs2gIypHlKNqP04g5/oSQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
263b3cea5216dc9066cb2fe0a6e98816_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
l
myxxdxjtvbp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE