getDialup
getMSN
getMail
getMess
getNetwork
getProduct
getShared
getStorage
getTrillian
getWindows
Behavioral task
behavioral1
Sample
75da2c88f3909c1a57a814414c1230be_JaffaCakes118.dll
Resource
win7-20240708-en
Target
75da2c88f3909c1a57a814414c1230be_JaffaCakes118
Size
146KB
MD5
75da2c88f3909c1a57a814414c1230be
SHA1
0e1458b7067dfb8d3a3bc5406713eefaff3a488f
SHA256
f90bd723fd60d4a60e03d239eb28982dc8955888cf39c98c91fa06d9c374d757
SHA512
d0c44c26fbb6fb34ecee6af7a434233d24251a28a3d45dcf3bec26e750eea9c23baa1969dd6963fa1e24825b46cfd282603cdf513e2581b34f6d4055b89340a3
SSDEEP
3072:RiPuuNKjSNKc/dHgTrRI/chZ8KFutvnyRU8XHAfP4UlFyf/O:YZ++Kc/dHgTr+/cfyKrgfARO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75da2c88f3909c1a57a814414c1230be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
getDialup
getMSN
getMail
getMess
getNetwork
getProduct
getShared
getStorage
getTrillian
getWindows
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE