Dir_App
KontrastclearType
Nazwa_Komp
Nazwa_Uzytkownika
NoUseFont
No_TrayIcon
Sett
ShowPasswordForm
StandardUseFont
SysExit
Tapeta
UseClearType
WinPass
Behavioral task
behavioral1
Sample
2934103803ccbc68a2d4a3e19d97529e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2934103803ccbc68a2d4a3e19d97529e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2934103803ccbc68a2d4a3e19d97529e_JaffaCakes118
Size
163KB
MD5
2934103803ccbc68a2d4a3e19d97529e
SHA1
14788920119c898b94a0db456ce1405701c9e9ab
SHA256
c31fdf07d41709cce22205ad5c157111e8de34d2e6646f1cf0aa62432ddd2fef
SHA512
a0785f31045a7d949e9bae0687bdbed5cba9fda51c731ea1b354d6759071504076a66bf6a0df7b1264013fba05111fb5214423440280c3cae790c0afd73d8e7a
SSDEEP
3072:wZ+sX7nV05Nn7bYlImSOhoFxu5jRlxXGeoFgFjZuVBOsQQISYvlap:K7XLG17mhquFl3oFgbiQQzi+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2934103803ccbc68a2d4a3e19d97529e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Dir_App
KontrastclearType
Nazwa_Komp
Nazwa_Uzytkownika
NoUseFont
No_TrayIcon
Sett
ShowPasswordForm
StandardUseFont
SysExit
Tapeta
UseClearType
WinPass
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE