A2W
MyDeskShow
RGB��ARGB
ʮ����ʮ
Static task
static1
Behavioral task
behavioral1
Sample
dc6f92f4fb7168a6df8aeef784e0ac7b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
dc6f92f4fb7168a6df8aeef784e0ac7b_JaffaCakes118
Size
367KB
MD5
dc6f92f4fb7168a6df8aeef784e0ac7b
SHA1
d9b6cd710a72fa7aa01c7738770013919cfb4b7b
SHA256
65fb54bf9cbf4867dc060cfea4f5b7955ac5a8ee24f7a849a7b76b1661f62918
SHA512
6d0f5641d4b7860406c6fc6b97838b98feb24aeba2a2c6e13523c1c29812d07ec741f4b4a2cbd750e46a611d32aaf86611b400e885a87daf38a604b189cfaa3c
SSDEEP
6144:gL+2S+vQmN3BFaXi51rw4t2IDuahWM3Qi9Mjt0jYWNMoS:w+2S+vzRR2+uahZ59MWsWNMoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
dc6f92f4fb7168a6df8aeef784e0ac7b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
A2W
MyDeskShow
RGB��ARGB
ʮ����ʮ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE