fff
mmm
sss
Behavioral task
behavioral1
Sample
4aab71cf3447e084fcb551c46be766c7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4aab71cf3447e084fcb551c46be766c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4aab71cf3447e084fcb551c46be766c7_JaffaCakes118
Size
12KB
MD5
4aab71cf3447e084fcb551c46be766c7
SHA1
ca99e219f155ef3fc0f61e402f2ba2812171b534
SHA256
78e7a24cf99c4a58614f1bcff64b5eefa8667df38cb34daffbbb800f3266d4c6
SHA512
e533f8a76f298b4f59d9308153d918451081a05a89510699d64d0889d4193b0c416ab78d11d9a2b6a3e017afe1fbd64bdf442442dcc68a0c19bb086b83dd8176
SSDEEP
384:TjHddVulY5jip/qWwecbvYaNJawcudoD7UQ:H9dUlMupTCbvxnbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4aab71cf3447e084fcb551c46be766c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE