fff
mmm
sss
Behavioral task
behavioral1
Sample
37086a52064a8846fabda8a9eff3e280_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37086a52064a8846fabda8a9eff3e280_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37086a52064a8846fabda8a9eff3e280_JaffaCakes118
Size
13KB
MD5
37086a52064a8846fabda8a9eff3e280
SHA1
34c72d708940d25a29b04953a7f0dcb4051b6b88
SHA256
34b11067d52e24dee1fb87cdabd29154d33afd533286ccb233aeb373462d0525
SHA512
744ad60c25c62e30cb89d8d4ee4fb739b8f250abbca83f7fba553ed778ac6cc2a8de2f0e2d8aa0010a418d2da058edc4b372d6cbd8a3d3766c5008306495ab7a
SSDEEP
384:noULFiB3nDdSQVsch9ic9WUPaNJawcudoD7U:oULF+3nD1LAc9lSnbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37086a52064a8846fabda8a9eff3e280_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE