Aria
Aura
Could
F1122
Flip
Behavioral task
behavioral1
Sample
ddd5b159a173e89d3a619bf8329ab5f0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ddd5b159a173e89d3a619bf8329ab5f0_JaffaCakes118
Size
167KB
MD5
ddd5b159a173e89d3a619bf8329ab5f0
SHA1
2ba3caf45fcb8b208b84485c4bc96cda50b9b0aa
SHA256
142dc191746bc078e72744f009b2df050b123808e7bfffebb90bc2af23193bd7
SHA512
7c8965d20efc69af1d4779058bbcccf2f2dffba4110a74e95659ec50811f28d256afb267d4e35e1d9957f19b6fcbc937670d5c9b3488add499ea9e42630b25e6
SSDEEP
3072:aTzHZ59wdwmfBCRCY9NBmv9yo7t8Izq+6jE6L5LeL2ktVYn7dQe8RyoxJoutl:Mz5/wdYRPcvIxOXg56LhLYnEoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ddd5b159a173e89d3a619bf8329ab5f0_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Aria
Aura
Could
F1122
Flip
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE