buphh
oceyi
qadrl
qjf
Behavioral task
behavioral1
Sample
3df790a205e368b82ecea507b2f72f50_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3df790a205e368b82ecea507b2f72f50_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3df790a205e368b82ecea507b2f72f50_JaffaCakes118
Size
275KB
MD5
3df790a205e368b82ecea507b2f72f50
SHA1
72724fa44d3821473ab890b61c09fc6d5162b3ac
SHA256
e6c30ac5dd122194b1c85fcb8f3eb3c771cf12a63190e3b2493a8bcd46f092c1
SHA512
f7ecdf59b93bcdb2badbe0dcda13712b56899c43d3a0538ae03e48f13b719dd4d101c3c3eb60a6870d2d51001f9c6c454a289226c163dc543390aef687322b7e
SSDEEP
6144:He44iKEuy57c+nTDTLU6SSHQcPJRgWJAldT7sAikWf2MoSq:H4iKEnc+nTDToY5PJ2r97sYWJoSq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3df790a205e368b82ecea507b2f72f50_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
buphh
oceyi
qadrl
qjf
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE