re
xuvyvzoa
Behavioral task
behavioral1
Sample
a26a247d013198aba3419763c57608b8_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a26a247d013198aba3419763c57608b8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a26a247d013198aba3419763c57608b8_JaffaCakes118
Size
288KB
MD5
a26a247d013198aba3419763c57608b8
SHA1
58592ea4c8651d2e1ea54632c1dd6394e4458ecb
SHA256
159480a8388ea62013ace4f73abc79f30daab6c425308db0838788b980ad01f6
SHA512
7d03a6efe9a678fe8bbc9a9d8fe3978ce95e3b883656adac869d0530489bad3e4cfd5499abf5555d44a3ca11129aeeda28287e26cd406003334276cdd1a31ed6
SSDEEP
6144:kTayiNtb/hkWtSHsgxJwP9dmd3cF7ih4zOzOv+PH2rc2FFysJo:k/iNV/iHs8M2wyRWVFDo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a26a247d013198aba3419763c57608b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
re
xuvyvzoa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE