fff
mmm
sss
Behavioral task
behavioral1
Sample
300b445a5c408164ea0b86b80f558a68_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
300b445a5c408164ea0b86b80f558a68_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
300b445a5c408164ea0b86b80f558a68_JaffaCakes118
Size
12KB
MD5
300b445a5c408164ea0b86b80f558a68
SHA1
6ea29181709bcbbd3998f7004c3ea6dd42c74c18
SHA256
f916a6fc8b1bbc7d8a195230f742712d770fed0ebbbaadc50ace5529daa9ea61
SHA512
9631458bc6baa547d95119daf31e5428c59f9fb001309aaa0d361cf264e5d80bb62f6d88d50bb36e1c0236a7fcc6207e1dff060c4b9fe2b10418b67f1916fc77
SSDEEP
384:TjH9zKdaphsVyf7tvAAd5yji2lCrNjpKJaNJawcudoD7ULP:H3RAAvy+2laNjpnbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
300b445a5c408164ea0b86b80f558a68_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE