bcmfrsvbm
txe
yffdyzfme
Behavioral task
behavioral1
Sample
d1a390d950616174f936edb8516043bd_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d1a390d950616174f936edb8516043bd_JaffaCakes118
Size
272KB
MD5
d1a390d950616174f936edb8516043bd
SHA1
46c9eb931b349a13520f37403b488a30a00e0c89
SHA256
26ec4d584994f73a5e3b800fa49fd574ba549c5036c5e1b0ce207beda947e9d7
SHA512
1cc3fffdce3009c27c7cdb450ab80c9e34b634b7f685aac901513807d3e020c008e9ee177ee439979f2c225f718e721450766d3bbd6214b170bc44e6c178de3c
SSDEEP
6144:mnVh1xqVZK1GtMPLWDWCfUgha/X+QzBP9xwtKKHrio2tKirPo3h2OFF0Dk0gAoSW:mL1/AZN7a/X+m9xCrLiDtOZF097oSW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d1a390d950616174f936edb8516043bd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bcmfrsvbm
txe
yffdyzfme
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE