re
xuvyvzoa
Behavioral task
behavioral1
Sample
a3210d537de45257be5763f5edddc839_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a3210d537de45257be5763f5edddc839_JaffaCakes118
Size
86KB
MD5
a3210d537de45257be5763f5edddc839
SHA1
56dfb4c12501687080897e6efd4d50b782307476
SHA256
9529d06612e8949162d219fd8c2729319319892f0f53a288491ddee1bcd09e8a
SHA512
837e413f5d1c4bc7b9f6783b83ccf8b6d104073e2348a6a226f7d69cd4c8e7b24aabe4fa811813adca8b139ffb142481bf60f8ababa4e5fb921367426b944477
SSDEEP
1536:nwj1dRdrf782/RH/2ci4O/EswyLCplWJxw6/p7PvFMGfbZN5Pji3nouy8UdK:wzRdr782/Uci4O/EbxWzw6/pzvFpbZNX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a3210d537de45257be5763f5edddc839_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
re
xuvyvzoa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE