canto
mutobronc
peydeyra
Static task
static1
Behavioral task
behavioral1
Sample
ad1e7a1e4833df79a338c9af05050137_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad1e7a1e4833df79a338c9af05050137_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ad1e7a1e4833df79a338c9af05050137_JaffaCakes118
Size
44KB
MD5
ad1e7a1e4833df79a338c9af05050137
SHA1
7fbed72b7a753b3fed4c4d2a3009bbf38cffa4cb
SHA256
b602dbde6a6f689ddab009ffda166de38693b6d486d5b786f4700ccb3abaff72
SHA512
d00dbd16aaa2d96ddc25302c5e5c43d73ab916387574c31f24728324f7393cf22df8105f4b8265278c6e40e20634c3abfc11bc00e7158564f54d484c4681ce70
SSDEEP
768:V/alKvEGiJx7Q0OZ7Qff0q+hqsz6zlw3nZYt9uwfQStUnnLu:V/aAvjSBqIf0b1zowp+fNtUK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
ad1e7a1e4833df79a338c9af05050137_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
canto
mutobronc
peydeyra
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE