Agenda
Faze
showtitle
Spore
Tail
Tuna
Behavioral task
behavioral1
Sample
8a5463e8e8ce8a63737a07b9ab043773_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8a5463e8e8ce8a63737a07b9ab043773_JaffaCakes118
Size
541KB
MD5
8a5463e8e8ce8a63737a07b9ab043773
SHA1
94a73c8a60820846ae6013d98259792349759a96
SHA256
462d2370875f0884bf40592d5317183b4f908084d59dbb9508bb08fb26ad3899
SHA512
8897e0926558592ab65371c8c672788c8a8ca06042d5294e5a3851df63224e00a00ab3998b994f029dbfd4d9e49084f116ae4d7a181bf03c14fa957854d3b63d
SSDEEP
12288:ggstybPWHYPl2H3FCOeSRuuHJ2mWFa5qMZXPBimtYvgmJv9JkIKxoxo0k:ggstUO4t2H1FluQeAUei1XSdx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a5463e8e8ce8a63737a07b9ab043773_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Agenda
Faze
showtitle
Spore
Tail
Tuna
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE