vcedit_clear
vcedit_comments
vcedit_error
vcedit_new_state
vcedit_open
vcedit_open_callbacks
vcedit_write
Behavioral task
behavioral1
Sample
ac9cf22b808a1151815fd8062180694b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ac9cf22b808a1151815fd8062180694b_JaffaCakes118
Size
18KB
MD5
ac9cf22b808a1151815fd8062180694b
SHA1
c0bb80b49e3f8607f0ab6c9590ee792d86f3c8ee
SHA256
322cc328453b16176155f64a72939c3a9f286e4615783d74d00b6541eb481a3f
SHA512
6af5f051e3b932ec97b94aadc6e6df024ecf8de2f1409f6cdb5915e80b87aeeef4f7b080bbac17772a5230d7b9c2a7ef8041bf5d98c7ff714fd6ba6d579ece20
SSDEEP
384:72s6pXAaLSPdLTHntuycTrRwkvK2ji9xc07H6csoNZRl41:isy8NTHntuN9PK2ji9rswRC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac9cf22b808a1151815fd8062180694b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
vcedit_clear
vcedit_comments
vcedit_error
vcedit_new_state
vcedit_open
vcedit_open_callbacks
vcedit_write
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE