avvx
kill
wdmd
Behavioral task
behavioral1
Sample
61cadfa2695ec32f4cd286a6ebb3a6e0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61cadfa2695ec32f4cd286a6ebb3a6e0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61cadfa2695ec32f4cd286a6ebb3a6e0_JaffaCakes118
Size
12KB
MD5
61cadfa2695ec32f4cd286a6ebb3a6e0
SHA1
dc5a756b7314f0b73c69879acd0b24d86c43cbd4
SHA256
fcd120f464da984bcf016be330296e96668c4fec25b57ff8099f4726953b98bb
SHA512
398e58813cf770ac35f758e3549bf85164b60e145bb3ed7b0c5a580b23784c5c10b678f1072a4bee12dae8159086724d3defd01f4626af6373bfe90e69dcebee
SSDEEP
192:cJ8pPbhxy6pkYUNkRGKdZiSD8Y309Q7ctqm9WPAfXTS1I3U4JfrOX:A8pPTCYUNk4Kvie0u7wqmmucENrO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
61cadfa2695ec32f4cd286a6ebb3a6e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
avvx
kill
wdmd
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE