bcmfrsvbm
txe
yffdyzfme
Behavioral task
behavioral1
Sample
6efb559fe5864a8efc7285ee696cf212_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6efb559fe5864a8efc7285ee696cf212_JaffaCakes118
Size
122KB
MD5
6efb559fe5864a8efc7285ee696cf212
SHA1
779b926f293500c14a1a710e4ac688b9a3fc4b7f
SHA256
ba058c63bf271a3b14468ca1c082eb8fb13d9588684e487003d9127b75d07936
SHA512
96f937c8187721542810474bdb0f93bf3012f51d9f0f17d9bfe1fa618ea4ee7d4cece87e3ad0d43950ed2172b5f5bd31043dbdeb4639dc814eb83be88d581090
SSDEEP
3072:4DxcGHj31rcxcwCYdKxz9t5jE2XVyunBVitZrbm0ToutJ:49nRcOwCYdKxtjE2lyuqfPDToS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6efb559fe5864a8efc7285ee696cf212_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bcmfrsvbm
txe
yffdyzfme
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE