F0
F1
F136756858467894783FFF
F13737625645735673567245624
F1435346457235257656724563457
F15675632473
F165795458356867892
F2
F3
F5
IO_A
IO_AAA
IO_DDD
IO_FFF
IO_GGG
IO_L
IO_TTT
Behavioral task
behavioral1
Sample
b80f4e49269ca2660fb8665904026298_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b80f4e49269ca2660fb8665904026298_JaffaCakes118
Size
76KB
MD5
b80f4e49269ca2660fb8665904026298
SHA1
807a5e6f1aabd8cf5efb34302e89a72e9e2e9f49
SHA256
11823a8a0d2023d79f9561d502ef70aa7df8d316ce63cc94ef8ad099e77179a2
SHA512
f48ea12a3f4226476244932a52451f8f6053e7fd963324cac889917b1d7c1b3b60fa27916111198421f3ea80a7673090afc08f64aa36aab07af44eb40c187b73
SSDEEP
1536:U5kythpDT+Q/nxX5kxScS8MLt4Rwxo7OM5qKEf1yzSOR+oQonznouy8zBCFS:U5fDNQScFHexovGoJkaLoutcS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b80f4e49269ca2660fb8665904026298_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F0
F1
F136756858467894783FFF
F13737625645735673567245624
F1435346457235257656724563457
F15675632473
F165795458356867892
F2
F3
F5
IO_A
IO_AAA
IO_DDD
IO_FFF
IO_GGG
IO_L
IO_TTT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE