ctxnh
fxuvdtqwup
gjmmaihrn
Behavioral task
behavioral1
Sample
45152320cf013fb2e705c293263edc2a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45152320cf013fb2e705c293263edc2a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45152320cf013fb2e705c293263edc2a_JaffaCakes118
Size
278KB
MD5
45152320cf013fb2e705c293263edc2a
SHA1
6c0114ea918a44264c75589a348f2ef301eafab1
SHA256
88aad4dcd8fbc9a8e83d526cc85c5584c218fd4a390171133c7baa33cbc20deb
SHA512
21cf632c4c5a884b00cff325c738aa4a9589ae070111c36b88ffff5e0f89014ac7c7bc23a86372b61de06de03f518e9c91fa55459c845c86854ae61cc0e474f1
SSDEEP
6144:ir4rcNJpXiPCioLsKh+41NJRn+wzhIUl8wQaJYy00VJ0oS/:o4o1Xiajdzfn3IUl8wUoS/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45152320cf013fb2e705c293263edc2a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ctxnh
fxuvdtqwup
gjmmaihrn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE