buphh
oceyi
qadrl
qjf
Behavioral task
behavioral1
Sample
d74411c7b4db6a72b7c482f4af8cc44f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d74411c7b4db6a72b7c482f4af8cc44f_JaffaCakes118
Size
298KB
MD5
d74411c7b4db6a72b7c482f4af8cc44f
SHA1
0223ad8882cb13bfdec5e9703658806b68c35d06
SHA256
5b02f753f8811a97920f4972f78842596b18a9e44e39f0242e329fc213e59e95
SHA512
9061ed71947ad2259be277a4cde3cf9231171a1b2e973e736c46249b91de7327dfd8884e64596baf1e6bbb0d2d629301bbe6881de34d6cbe4ced71d9008a27c6
SSDEEP
6144:wTpYpopl59QnixZHqbi6VPiNCHsYGQxSbvxLV6sWfoS4:KpxtXqVVPiNCHTOvxLtwoS4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d74411c7b4db6a72b7c482f4af8cc44f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
buphh
oceyi
qadrl
qjf
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE