bcmfrsvbm
txe
yffdyzfme
Behavioral task
behavioral1
Sample
3b709daada5eaf71badf12bc1c708618_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b709daada5eaf71badf12bc1c708618_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b709daada5eaf71badf12bc1c708618_JaffaCakes118
Size
272KB
MD5
3b709daada5eaf71badf12bc1c708618
SHA1
53a6eb788292a5ee16d04364a7214864789c8db2
SHA256
5a4a2e1da867dca2ca2283aac4db912e70455031a20b21f0b2f3061df654c310
SHA512
2ee89f8602181421c63b0852b049dbda430a6a1ea00e5718f081c79098e0dabb21d08a726f912b74732b9c26cfb191e5cc42a1afaa95d7d760335b2910cd4b7f
SSDEEP
6144:mnVh1xqVZK1GtMPLWDWCfUgha/X+QzBP9xwtKKHrio2tKirPo3h2OFF0Dk0gAoSW:mL1/AZN7a/X+m9xCrLiDtOZF097oSW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b709daada5eaf71badf12bc1c708618_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bcmfrsvbm
txe
yffdyzfme
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE