Init
TjScan
Behavioral task
behavioral1
Sample
d2f8bf8d4a51125dc5df0e88ba5fdccc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d2f8bf8d4a51125dc5df0e88ba5fdccc_JaffaCakes118
Size
223KB
MD5
d2f8bf8d4a51125dc5df0e88ba5fdccc
SHA1
8438f6eaa1d7f6437ba61dab35ce050b2afaea1c
SHA256
a532479e0794ce12d7cb11974f754edd927d6e87ca449cf4dfcf060802faaa18
SHA512
168c624d0d798183dbbe77b1c70b9b8eebd5f152cbe4e579cb6766528168f0899d00180e4d36daf849513a81558380b048968cddb3ba981520476ccb96c490c3
SSDEEP
6144:+70WjJfCJi0iwmKykj1w2NZlaVhBGwWqP7pO3A9Cf:+70Wj0YMmTkG2NZlaVqlWF1C
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d2f8bf8d4a51125dc5df0e88ba5fdccc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Init
TjScan
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE