Brain
Dowry
Forty
Kitty
Mango
Sally
showtitle
Style
Behavioral task
behavioral1
Sample
2b8ed3cd324548573273247f2d826dc0_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2b8ed3cd324548573273247f2d826dc0_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2b8ed3cd324548573273247f2d826dc0_JaffaCakes118
Size
541KB
MD5
2b8ed3cd324548573273247f2d826dc0
SHA1
7fe22431ef3dc57a6d1caf5137be8ba4037e4f45
SHA256
55f174265275d70c017e2215d67bbbe53ec6547636fd76fb1373bac466f88fbd
SHA512
43426fdb05294fff4534adbe61e99d4f4aa49843dac80cbcabe6639bd75ecc293d9aff2416162706e7b2bd284bf7498407b0e926514aea049f8605f3eb302c61
SSDEEP
12288:C/mXgaBJCDUoPtLhKa6cXnOOLwj4NxYglgo0:C/1KJCDUolDEOLHJl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2b8ed3cd324548573273247f2d826dc0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Brain
Dowry
Forty
Kitty
Mango
Sally
showtitle
Style
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE