Abe
F1122
Shaggy
Behavioral task
behavioral1
Sample
634d88a345131062e4e5620b46cf787c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
634d88a345131062e4e5620b46cf787c_JaffaCakes118
Size
174KB
MD5
634d88a345131062e4e5620b46cf787c
SHA1
b977f80bb38b1c1cbf2e2578c7d08a7fcfc25c26
SHA256
4fee658a40276eacac65d163600ab6fb0f08a3c0b4b54ffa0e9b99292b9f8211
SHA512
f4e7f363bd55369885d53ecff418ae244b2d37e2f2544a0411259e6e052d3ce9365ab3b8979f3787a1cbe4f530efdabf700cc2c636cbf1375c8615c41b5ebf53
SSDEEP
3072:VcKWaCK//d+yW7v+NMQ0lzoh4YJh3KEOjp8AHhR6hoqv5K+ZM+outC:VfbLUlEpJdKEOjpD36ySz++oS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
634d88a345131062e4e5620b46cf787c_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Abe
F1122
Shaggy
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE