IsSound
Run_360try
Behavioral task
behavioral1
Sample
95fd8a04677a224b06a30cf138dea715_JaffaCakes118.dll
Resource
win7-20240705-en
Target
95fd8a04677a224b06a30cf138dea715_JaffaCakes118
Size
196KB
MD5
95fd8a04677a224b06a30cf138dea715
SHA1
bdac11a19389fe1c02d5d56cbfd9c775b7ab1908
SHA256
ca4a4fb2c710a57374c6e470f8bce8e33e45550e5307cc5b7dbd53bfcfaf82d3
SHA512
cc830872bdbd2483a8ba489b447b6b4d9693c5ce79568c3de4bb5fae13defa28ffd6e5f3f3ccf3f105b5d72c6ffbff08b47dbb754d6ed32d5dc9c9bc106c4933
SSDEEP
3072:t3ZcvZFvNWA2/e/y6gHQFIaaQXJ6gi9SCfiGp7MVs5DxfY/WVizBMT21hehEHJdr:/yt16RwFIeZ5mfi0JsBLehYJfM6O
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95fd8a04677a224b06a30cf138dea715_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IsSound
Run_360try
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE