compress
uncompress
Static task
static1
Behavioral task
behavioral1
Sample
a7c1a0c396e1bb15da653d22fcdc1000_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a7c1a0c396e1bb15da653d22fcdc1000_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a7c1a0c396e1bb15da653d22fcdc1000_JaffaCakes118
Size
214KB
MD5
a7c1a0c396e1bb15da653d22fcdc1000
SHA1
d6e8778fc9b2514e396d55d32909904086b82178
SHA256
a1a57e8a750e8b5a0ec5173fe0b290e7554b67a9f9371250b7477edc07eb4b95
SHA512
5a37e5082186bc0e35453df05bfebe6b19e99d362588a2cf7a60390a7da5cc04746ecbf71f2ae38c786ee6b8c099c97a0f01a187aa6b5e6cf0ee2bf85f713839
SSDEEP
6144:KGtmxkEKTSPCqnwkFe3PEB1M3QCHu8Uvv69m:Vg6TSPXnwMPbMgwqX69m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
a7c1a0c396e1bb15da653d22fcdc1000_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
compress
uncompress
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE