re
xuvyvzoa
Behavioral task
behavioral1
Sample
d19c01cfa8b5ff9e02da8878b18a7dde_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d19c01cfa8b5ff9e02da8878b18a7dde_JaffaCakes118
Size
124KB
MD5
d19c01cfa8b5ff9e02da8878b18a7dde
SHA1
41b31dcb438ea567b4147355028974c40e0afa14
SHA256
9646c037e43b3266ce1364df6127ed3b406ca21bbd95d2638e370f56b475b081
SHA512
9ab671e720e058b1f433d4e25aa5d04fb62d9ded3f32d5629278bb235db17cae87730f1052c48083ce28089e41f38ad2252b93b4e633129b4f323f51282c26be
SSDEEP
3072:5QCnNdh+hIt8Yhi0v/c6Qd9hDzywSsiYI9BoM2/T5outwd:UhIfznc59VOwSsixFsT5oS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d19c01cfa8b5ff9e02da8878b18a7dde_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
re
xuvyvzoa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE