InsPL
MakePLIni
Behavioral task
behavioral1
Sample
623a49e43bbabe5d8b9b6c6b3f28d263_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
623a49e43bbabe5d8b9b6c6b3f28d263_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
623a49e43bbabe5d8b9b6c6b3f28d263_JaffaCakes118
Size
271KB
MD5
623a49e43bbabe5d8b9b6c6b3f28d263
SHA1
924dd2946789b125a451440ab4cb6bd5733b7240
SHA256
6ac76e8102ce30122b85d5e756295ce7858a456e701cf0407b218a400988bba1
SHA512
06fb30af4b92adce77cfb05f3653bfeac1903f79a2a7850f96318add26a10fbaa842f6470bb96fcff7302810f61a2af16a55b12f7f9854294a6904cb4b1c81a3
SSDEEP
6144:JGKO5zKW4GZotI1zDjg/Q9ud7Mzpobuc0GvrrA1CIP1QfmzJlD:JbO5zKMoKjiH7Mibr044CuS+zD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
623a49e43bbabe5d8b9b6c6b3f28d263_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
InsPL
MakePLIni
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE