jlgfrlvrko
xobxtvyt
Behavioral task
behavioral1
Sample
3bc329c356e25790a87710bb0fc6caa9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3bc329c356e25790a87710bb0fc6caa9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3bc329c356e25790a87710bb0fc6caa9_JaffaCakes118
Size
276KB
MD5
3bc329c356e25790a87710bb0fc6caa9
SHA1
164030799f9ca96325baf759a7d1e407b47e790e
SHA256
069a4aeed43372199f976c9778df81d7f644989816709b2b5cb1e65b2a02c6c6
SHA512
9919209c61946b41f1a82b596b53cc044ddb6e78ad924f5b2653e37745720bab8925e44b222e3b4d4bae7d133d3f7e7e6779d121a831d3f81cb3884b45616370
SSDEEP
6144:Bp5ImdOrackaMIfqQ3Udqq7elhdObrNJztC1oHRUTkyZ6voSA:dISOvrM/Q3zo59tCSHVyIvoSA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3bc329c356e25790a87710bb0fc6caa9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jlgfrlvrko
xobxtvyt
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE