ctxnh
fxuvdtqwup
gjmmaihrn
Behavioral task
behavioral1
Sample
3c744481d168e168c616cb70661ac479_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c744481d168e168c616cb70661ac479_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c744481d168e168c616cb70661ac479_JaffaCakes118
Size
274KB
MD5
3c744481d168e168c616cb70661ac479
SHA1
03447eb6c7f39c78c28fc674cbf208a1cfcb4b18
SHA256
4f08f9f49d665cca4be1399d8e29113dda2b96bcad273b71cc5ea8c7c3075e11
SHA512
46ca93d5c164c99c407bbfde704df456983f9e616b37262ebc3ffc76edec55d22e3eb84ea05d98ef0bea5fb3a01c9e09d2e9a50ce7cd5d04f37e70663e2df105
SSDEEP
6144:+Ne7mXvW5K4iisHBf5yAJ5av43AYm/m74F8LVoSr:+QQO5K4i1BByAv54EoSr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c744481d168e168c616cb70661ac479_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ctxnh
fxuvdtqwup
gjmmaihrn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE