l
myxxdxjtvbp
Behavioral task
behavioral1
Sample
2ac47ab944bd6ca996ceedf40a981637_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ac47ab944bd6ca996ceedf40a981637_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ac47ab944bd6ca996ceedf40a981637_JaffaCakes118
Size
282KB
MD5
2ac47ab944bd6ca996ceedf40a981637
SHA1
597f01e7daf6c9f7cde0087151e49ee90662e900
SHA256
b6bf8bc8497695beea9abd92b7051414d196f7c7a61ed9a4ed2186a9d786869d
SHA512
fc0751e03b0cb469379ac5cda9b8ac8a2da026125f5a8b9e41940d0d1bcee25f4d58d70e99db572523fc57644700acd585540a4782cdb84f53ac3297a545f771
SSDEEP
6144:XArRC6SxoN2LNofk2wdSpUl7Rs2gIERXcKHlLduLutReNmrhbfP04g51RXoSF:Xf6SxAmNoBqs2gIypHlKNqP04g5/oSF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ac47ab944bd6ca996ceedf40a981637_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
l
myxxdxjtvbp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE