Cpdo
Emq
Kx
Behavioral task
behavioral1
Sample
b90b88bf0cbf14ba1ee416ba518347e7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b90b88bf0cbf14ba1ee416ba518347e7_JaffaCakes118
Size
70KB
MD5
b90b88bf0cbf14ba1ee416ba518347e7
SHA1
64f7ee6918f92d8d5161ff2d555c217d86763d06
SHA256
da8f5d87c35d44486781cd85f35cd59a50853f9c6ef9d957e9530aa5d16a626f
SHA512
1ed2c274843e2f04fdb001fa702d36349bfead416facde57cdcf3f93b2ffdedee37b2c21ac34c5610177dc090f71340e58f294ddcb50ba518fac3ea49b7deca4
SSDEEP
1536:ysafWMbuYApgJBJViyzhFtQPh3D0o8XXSjZpEwsRjnouy8Q8:HMbEpgJBJ0UF2P2HXiNGoutT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b90b88bf0cbf14ba1ee416ba518347e7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Cpdo
Emq
Kx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE