l
myxxdxjtvbp
Behavioral task
behavioral1
Sample
43704c952493d4d2746d3d110af6d825_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43704c952493d4d2746d3d110af6d825_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43704c952493d4d2746d3d110af6d825_JaffaCakes118
Size
282KB
MD5
43704c952493d4d2746d3d110af6d825
SHA1
071dcf7535dc37758d2e361aa543e9690563ed03
SHA256
b07d99428d5319299307e314e848be5fadfb3346181fbe0db4164b582fbe2389
SHA512
1e1c67846daf839713b57f24fe427dc61432510b3d7ded7202603a871b24093da8bbdc75f9fe8ddb8858297b5028368e27957aefc9ed1152d68d9f9acc503f70
SSDEEP
6144:XArRC6SxoN2LNofk2wdSpUl7Rs2gIERXcKHlLduLutReNmrhbfP04g51RXoSK:Xf6SxAmNoBqs2gIypHlKNqP04g5/oSK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43704c952493d4d2746d3d110af6d825_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
l
myxxdxjtvbp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE