_�����ӳ���
����
�Ƿ�ָ������
Behavioral task
behavioral1
Sample
b80aa65990c58d2be3bd30bafe6ff566_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b80aa65990c58d2be3bd30bafe6ff566_JaffaCakes118
Size
651KB
MD5
b80aa65990c58d2be3bd30bafe6ff566
SHA1
7b6d6af5512cc6c3f200cb0d58bfeeff22478069
SHA256
e1591f77e22de7ce2aed88fee02059f15be83193cfa25bdf57d9c9b8479aa32b
SHA512
f34e071bd20501d617eae94646c7508fc52ed8e456e1d61ad4e8dfc6d3887890168dc1c020903c99db71bdd9dd67fbefa3cafb7152f55a8fd2e8f1469751b868
SSDEEP
12288:PXj8DEnupWHkyb0GvjhEYmVkv+T5P23UsIAMG3SuJE:fj8DEupWHJveig5AUsMG35E
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b80aa65990c58d2be3bd30bafe6ff566_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_�����ӳ���
����
�Ƿ�ָ������
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE