Axe
Books
Daddy
Dreamy
Honor
showtitle
Terms
Behavioral task
behavioral1
Sample
b2e38f7140a0230527b2ae5242375670_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b2e38f7140a0230527b2ae5242375670_JaffaCakes118
Size
541KB
MD5
b2e38f7140a0230527b2ae5242375670
SHA1
5f9951b5c4adbe99f48d7c53e7019a31d6fe97df
SHA256
658051b8081266b48f39f45b71ec8b2cbd5d08334df646a6495f35eefdb8579f
SHA512
a6e23773bfaf36bae355e95881d447d6d52f15b33c2c5156e293996e9ecdff5c864431b00e22d446724104e9e6f93caa75332c3ff30e32410ce0bf9a46e77d88
SSDEEP
12288:M9lqhiU7HIRKK1mK3AoZZR08XqMaigoaqcN7t/Tijjo0:QjU7HIRBx3TVRX2jWc3T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b2e38f7140a0230527b2ae5242375670_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Axe
Books
Daddy
Dreamy
Honor
showtitle
Terms
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE