fff
mmm
sss
Behavioral task
behavioral1
Sample
a432c13aad02c231364d47c16b999a39_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a432c13aad02c231364d47c16b999a39_JaffaCakes118
Size
12KB
MD5
a432c13aad02c231364d47c16b999a39
SHA1
edfbe380816482ff6fab856fd5f495bcea48905a
SHA256
97b76efb98ae7d3dc190769d1ac147128bc7f72fbed5d9dd7976462c61f6689a
SHA512
f0c6a38bb99887b2559d98d846a40e939cc796c7178c549bddafb1381d67e53096f3093de1d4a0f59a284ce84793ebf5df3e65b0786180ae56b958f8b43c075a
SSDEEP
192:PTFUpHRZ85vnCjef+Apvdet76byD0MEobNzU0RgoFFaNJhLkwcud2DH9VwGfctxu:rWMPin58GD0gzUwgiaNJawcudoD7UZw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a432c13aad02c231364d47c16b999a39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE