kh
pckduwrwyb
vyuxfjse
ycna
Behavioral task
behavioral1
Sample
416b512146f7afcb7ff10315b3c5d80e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
416b512146f7afcb7ff10315b3c5d80e_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
416b512146f7afcb7ff10315b3c5d80e_JaffaCakes118
Size
278KB
MD5
416b512146f7afcb7ff10315b3c5d80e
SHA1
07485adc640e5d268a1992b1f58336fecf027648
SHA256
09e5e051fc44b4c812caba51af795e1a485f2b606ceca998e30d546af04579ea
SHA512
ea8a81ad848f25af6397fdd5b9e7b2f2608774fcc546678dc46891dc224bef7d1f57e4f9eb6a8942606749e1f99874c0d76ca5d32d719ffb7986a64fa81654b9
SSDEEP
6144:QTY4hSLrPZfAKIoIR2bdsBhupUfO7sBFe0oQs/vGJX0OPAw26JoSe:QE4hGRfHIKRs0Ufe03s/vCX0ZwRoSe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
416b512146f7afcb7ff10315b3c5d80e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
kh
pckduwrwyb
vyuxfjse
ycna
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE