lxtub
vtdmg
xptcupl
xylutxzr
Behavioral task
behavioral1
Sample
8244de9bf5541a57aecc3d788c0b2b4d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8244de9bf5541a57aecc3d788c0b2b4d_JaffaCakes118
Size
81KB
MD5
8244de9bf5541a57aecc3d788c0b2b4d
SHA1
2f92e0a683a24d859098f14f45ad2bda5a51f633
SHA256
3eb63eb642b8c492580882d56ffd6ee222563ba354714cdb06ee1b00b538aeb1
SHA512
263db30c0854303d7c5e418dd2a49c48f8214153f300fcf0fb47ef3dbb071c5276da23fa1747fdebd7f9b653725c5dae5b391ae703b0058369377765aa87724e
SSDEEP
1536:9kBxXYlNWweUzFo7aaT+PY/9w/ycO+pQu1kc3VKtnB/Xnouy8Id:uBxUElTTZlwLSJRB/outId
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8244de9bf5541a57aecc3d788c0b2b4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lxtub
vtdmg
xptcupl
xylutxzr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE