cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
Behavioral task
behavioral1
Sample
3e8b4e5eb919b8c63dfb38a7dfb210b9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e8b4e5eb919b8c63dfb38a7dfb210b9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e8b4e5eb919b8c63dfb38a7dfb210b9_JaffaCakes118
Size
46KB
MD5
3e8b4e5eb919b8c63dfb38a7dfb210b9
SHA1
1a0f59ed49443ff5c8676e64b859a80803a6e366
SHA256
69f9caabb76494cc7ce2500ff4d21908458a356f41e314fe0808455d1b0d7212
SHA512
88ce00659b4610aa1e824e5c0e28d533f94e74d6bf70f391f93b16743d8112b7d7a8b9e6aef13e140bbed96f3a402edc680deb7841ee478885a3d9d3f008d15e
SSDEEP
768:oLndTualzDjBan8Pfu7NsJ8rJHw9DB2s/hcqS2Bwt7qG1Ot0eZvnbcuyD7UQl:oLtX86uc8VQ9ldZcQCq/XZvnouy8Ql
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e8b4e5eb919b8c63dfb38a7dfb210b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE