dmus
fuck
thew
Behavioral task
behavioral1
Sample
77d0ee39032cadeb97c8f4159c26b8d6_JaffaCakes118.dll
Resource
win7-20240729-en
Target
77d0ee39032cadeb97c8f4159c26b8d6_JaffaCakes118
Size
12KB
MD5
77d0ee39032cadeb97c8f4159c26b8d6
SHA1
3d746f2b7e424665317a890dfd829cc76798dac8
SHA256
a2b40510bdf79b9550a4a924474ff1267661f97800a75b031579616a8b4fac10
SHA512
ccc016e75a5e01ad1cf0d0777c9575cfed4adf7d4d51c96a2ad2c9d1989aea4c39a9e3525654a838efe2453ac25e82a3629ddad684020afa144230b51cb88729
SSDEEP
192:XlyS67CHZNL5AOfMVx9M3hq+DY9cBLeadYOv614nWhGAAfQZsAD4g0Eqv:XlySP5bTfM/SYe5earXWEAoZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77d0ee39032cadeb97c8f4159c26b8d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dmus
fuck
thew
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE