Bids
Freon
Grope
H9922
Taunt
Behavioral task
behavioral1
Sample
168ae96aea6731693f390510047a8a0f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
168ae96aea6731693f390510047a8a0f_JaffaCakes118
Size
152KB
MD5
168ae96aea6731693f390510047a8a0f
SHA1
10500075782d946de3206a511cdb3625d2910b24
SHA256
9beac396002edd3626d5c7fa4532b289ebb83f9cff1a7181759d4e3ca51ef5c8
SHA512
23d56c9439d2ed2f9affe74b5f583c1c26d83f59885498b3aee82f7f53ad2d78140a3f06728642b2a2c9c310ce47a0ba763ea58d81ca596da6b6b379bc39934e
SSDEEP
3072:2/lc/gJcALXFGdG7ecy0tqZC/EEXxHEwxd6GL33XQbs/4Skg4wv6t8L4ouX:cc/wLLXwgZy1CXGwxYyXusgSkg788Eok
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
168ae96aea6731693f390510047a8a0f_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Bids
Freon
Grope
H9922
Taunt
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE