fff
mmm
sss
Behavioral task
behavioral1
Sample
dbc5447df8f78d3543366ae2c9654815_JaffaCakes118.dll
Resource
win7-20240704-en
Target
dbc5447df8f78d3543366ae2c9654815_JaffaCakes118
Size
12KB
MD5
dbc5447df8f78d3543366ae2c9654815
SHA1
b230f54481aba900275b34c7d190155043015e61
SHA256
0ce09241a70503cfd90e54e4a9fa3646e06a56575a4b17b8f19538a03a9a7306
SHA512
f18caef219abc19c2224c2da3cbcb98083c43e6ceb79cc658bd7f257eebd54976926e54e73818fbb6fd69445d8a78091b66c57637b94f23b255a00cf816613da
SSDEEP
384:Cc0a9KaXDTbJbVTDIJUGaNJawcudoD7Ue:Ccf9XD1VTDIinnbcuyD7Ue
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dbc5447df8f78d3543366ae2c9654815_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE