fff
mmm
sss
Behavioral task
behavioral1
Sample
29d08348805fab5e619d9518a139a654_JaffaCakes118.dll
Resource
win7-20240729-en
Target
29d08348805fab5e619d9518a139a654_JaffaCakes118
Size
13KB
MD5
29d08348805fab5e619d9518a139a654
SHA1
fe78539eb416ea5e69f485e5d2afcb4aa93a62a6
SHA256
19ddb3fd20cb4c9913ccc77c2541c809d0232c5ac6d4c815c628a2cf0e3f0e15
SHA512
1caf4637fa1e1a366a7c309afc9a9b81a8c653484a18e7072c02f95f54b4859744286ad040ac887ce697b5a7d0d69ff658dd7c859c6b757c6e676360727a6b1c
SSDEEP
384:AbY+MZNwD3ePlutkbYhnaNJawcudoD7U:A0NwD+YhanbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
29d08348805fab5e619d9518a139a654_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE