cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
Behavioral task
behavioral1
Sample
2a4d7aaad23d30b89b28dc33f9c360dc_JaffaCakes118.dll
Resource
win7-20240729-en
Target
2a4d7aaad23d30b89b28dc33f9c360dc_JaffaCakes118
Size
276KB
MD5
2a4d7aaad23d30b89b28dc33f9c360dc
SHA1
a48a8bd44a960c3ea15fc861202b93cb271a219e
SHA256
dd26340eba7ff8083eb2e4fe09de8cec15d4d4080135db7a88b6cb8eae7f9814
SHA512
052f0e5a8db80b84035aec8583e8812715dcec0c4c5c3fad179acf9aa1504880e40dfff6b4aac3341914e1891501c437d3057ba256cc3473d18e0c03338e25c3
SSDEEP
6144:AoOI3Xm8ES3/s3vInjF0/UpG/KxX3KThgPGhRoSy:tXmZS3OmFiUOKQhgyRoSy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a4d7aaad23d30b89b28dc33f9c360dc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
cqdtwd
elwfmvqpuqm
wmcfgon
wtaisxzxj
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE