cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
Behavioral task
behavioral1
Sample
6277824f7e7bcfe06c230ea351b1c85e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6277824f7e7bcfe06c230ea351b1c85e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6277824f7e7bcfe06c230ea351b1c85e_JaffaCakes118
Size
84KB
MD5
6277824f7e7bcfe06c230ea351b1c85e
SHA1
33c3cbe7ac294d5feb337fbd9dc2e81a5a6d949b
SHA256
f55fbfbcfb1a69f097ff6ad7850cef5ce1eefdd56f7766c2afac3a40927bf03c
SHA512
8d2315a704bcce8f8190459cb3820d8c20335cc37dd2a2db99629aa5ce94fb41d84a52ab888ac9c5e8887723c6fe5f1ea0dde23474f6fbff145e0c91c1dee5d2
SSDEEP
1536:wLptqNEsFj4JFpgOFkhfYLIBcRFW3cXbPN+EgLWTjxxpYQ3xVnouy8N:q6NpaXFd2MFW3cXbPlrxxpRhNoutN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6277824f7e7bcfe06c230ea351b1c85e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE