fwor
nieb
Behavioral task
behavioral1
Sample
8c36a84814e51067155bd8bc7291b367_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8c36a84814e51067155bd8bc7291b367_JaffaCakes118
Size
87KB
MD5
8c36a84814e51067155bd8bc7291b367
SHA1
ef25bdfd8eeb1753b6348dbd26009d11cc65bf43
SHA256
d15214ca1877b13b39eda3bdc88f11ee3dca3947b953c18da7b29dbe60588df8
SHA512
b87cc4966ee6a0d15cfcbfab5b2b226fc35cea84242f92c6d89c42585180267759c5dc2dc54720888d3b00ef4a878a27e6e8b108b9ab1dbc31636ae84ea40352
SSDEEP
1536:ocoENi5D7s96hUA1Hx26y5Z6aaoREWDWV1veZwSGU9B5rqEi+e8zsYnouy8od:ocoENiZ7WQ9xHsFSWDG5eRlerX8IQou+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c36a84814e51067155bd8bc7291b367_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fwor
nieb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE