kh
pckduwrwyb
vyuxfjse
ycna
Behavioral task
behavioral1
Sample
371ef88d9b256ffce67326d48f255b29_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
371ef88d9b256ffce67326d48f255b29_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
371ef88d9b256ffce67326d48f255b29_JaffaCakes118
Size
81KB
MD5
371ef88d9b256ffce67326d48f255b29
SHA1
bde4206064a1486f9a9436fd614dd381e178c52e
SHA256
b7f53c4436da418c5d1cc2f82b68674018a0c861a54e1b10879c693c10200756
SHA512
136a7ea44eafdbfa3fd4bf7a0c3a85aecef387011361ea37876d32db846d17035097b29eb8ed310ed1507124e3a325c607870463759846f38b22d9f75aab4b9a
SSDEEP
1536:VzbkkQHVS/xMaDAis5D1SPr9xIgJqjvaBtyycWGF9nouy8S:VnQHVSLoFAajAcWWoutS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
371ef88d9b256ffce67326d48f255b29_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
kh
pckduwrwyb
vyuxfjse
ycna
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE