fff
mmm
sss
Behavioral task
behavioral1
Sample
756860299eefc6035df4fd7379b56a8e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
756860299eefc6035df4fd7379b56a8e_JaffaCakes118
Size
13KB
MD5
756860299eefc6035df4fd7379b56a8e
SHA1
36a02f0015c48b60d7352488a7e2d4e35a058a2e
SHA256
6c12d9b0126941501d2779eadc60b1e1f933e76d4839a85ae8cec4a5eda6d115
SHA512
1c1774e3dd5420e4f3d1fd772dbe0c6c92644fe60b0a9abfd6dc5b03dd0b46601f4545170400434ba1cd73ac881c865d768c8bbbd2ea0fbb163137ccd03d68f9
SSDEEP
192:klbnXJNmsGjVxfjWNhNJPyP5QSYa+3veCFaNJhLkwcud2DH9VwGfctr2aV:+esGjVANhXyRQta+fzaNJawcudoD7UM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
756860299eefc6035df4fd7379b56a8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE