dvo
jjhxfbksvc
joooo
pa
Behavioral task
behavioral1
Sample
7757a8cb3413c30f7ee4439a98ef837d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
7757a8cb3413c30f7ee4439a98ef837d_JaffaCakes118
Size
44KB
MD5
7757a8cb3413c30f7ee4439a98ef837d
SHA1
f5548ccecbcedbbb2454e8680babca11a98db170
SHA256
a70ab0a23803b0fc5105764ca7a1299b06280ff1b2d08cd0ecfce4e6849e4eee
SHA512
35453c4caf726bad71fb268f4039e68499b84e49bdff293027c3423756a946efb4ec09517a27cbf1266bdb950d8f6c96a3626cf23029cc9e0cbc2698574b604b
SSDEEP
768:hr5ZqlZRYanPGreTXyRxHfnkGtCqW1MkVo8Q6uKv30fu9xUf/3aeu2Jmp/enbcuI:hryNGrwXyHfkXKkoKv3wufUfvaeu2Jmp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7757a8cb3413c30f7ee4439a98ef837d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dvo
jjhxfbksvc
joooo
pa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE