bcmfrsvbm
txe
yffdyzfme
Behavioral task
behavioral1
Sample
ea1e11a62288bae4fb492365caa006f1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ea1e11a62288bae4fb492365caa006f1_JaffaCakes118
Size
48KB
MD5
ea1e11a62288bae4fb492365caa006f1
SHA1
335f1bcf5b469f6b8c7a365f290dbd044891c908
SHA256
fbf25cc88aae905296a24325fa6105c7fff563570e4508e843663b0ab11996c2
SHA512
ef79a6ab999c99cbeb80c11bcc49c99c801d4db053488a4cc79f3ef5db30b5f59db537d753f5dd3c27991bb5bd5f1f339ddf403e9bb310d0dd6505034eec2306
SSDEEP
1536:hEjhs5niynjrFrh70R1a2ledWlTJ9uXnouy8jE:6dsBBvFrRyZYdWtJ9SoutjE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea1e11a62288bae4fb492365caa006f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bcmfrsvbm
txe
yffdyzfme
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE