polnoe
wddermo
wdgovno
Behavioral task
behavioral1
Sample
a081f717a9235c6514a98e0de062ff1e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a081f717a9235c6514a98e0de062ff1e_JaffaCakes118
Size
12KB
MD5
a081f717a9235c6514a98e0de062ff1e
SHA1
59fbb9379b16ad352337db350c05ad991452fc35
SHA256
68ef7da26ee7cd199fc89e330caf06c5aa8f079a529329f1e82bbad8fee0162b
SHA512
bbb6f3eab80d1d48eabe44462c12d5e0f92f8d388e88be21976be572ac231f44da3316416d0fc965a839cffad5d821b510cd524fbc05cd9ebddfe0d63234116e
SSDEEP
192:cq7A096i2AZuLeT3WVdqL+yv6SDg4h4N8Srt1dod2Xrajyq6V7DMbzqA:rsQ63ameqdq9v6N4h251mwWs7E
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a081f717a9235c6514a98e0de062ff1e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
polnoe
wddermo
wdgovno
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE