fwor
nieb
Behavioral task
behavioral1
Sample
5a5fd5714ccc59f3203f645b63f839a6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a5fd5714ccc59f3203f645b63f839a6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a5fd5714ccc59f3203f645b63f839a6_JaffaCakes118
Size
284KB
MD5
5a5fd5714ccc59f3203f645b63f839a6
SHA1
927c43bd7ffc267ec6b14038712374f6c5a6042f
SHA256
e4a595af9408c3c05f99d3c2d5277402501ce8fd2d20ccdc5982fc6b2ba914f3
SHA512
be46ae7505e662b84ef352444941ed3f225fc793212a4d7c0fec0f43d340a00031112ff6f1d1b38edf353c77cb562d55872be84c20350bec3410a1defc2ff8e7
SSDEEP
6144:ilY1JasC6nBjw6fj9oCKviQgdLB579oMk73NJx1Kk0MV8zKAwrk5iWqHfLcduh4w:+yasCWOimviZyMGrKk0MizfwrkYWuLc0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5a5fd5714ccc59f3203f645b63f839a6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwor
nieb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE