fff
mmm
sss
Behavioral task
behavioral1
Sample
c967c06494f67e335f0dce6af5f8a108_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c967c06494f67e335f0dce6af5f8a108_JaffaCakes118
Size
13KB
MD5
c967c06494f67e335f0dce6af5f8a108
SHA1
42beed9fd7a9367c2daee7c0f21697bf935ef99c
SHA256
dfcbf5946bc87798a5d98c7c766fc8bf1e2578d51b97c194391a443f7d0d8524
SHA512
0c5a5954ba71a93c0c821d466fbba9022e726e6c4ce1131d9ced01e0c0b2ca555ceb81de86fa256329097c6e9e0c812e05b76d9acc1a96adb14d1d1d85c1fe12
SSDEEP
192:lklbn8DD+rYJ5JwbRxEzpDl4qjU5/QuqSov7qiUB/FaNJhLkwcud2DH9VwGfctjV:8w5m7EzpDl45NqBF49aNJawcudoD7Ub
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c967c06494f67e335f0dce6af5f8a108_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE