Bert
Check
Did
Duet
Is37n
Lose
Piles
Stern
Behavioral task
behavioral1
Sample
2bd0034e67ac8da953360cc84ba9e3b9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2bd0034e67ac8da953360cc84ba9e3b9_JaffaCakes118
Size
152KB
MD5
2bd0034e67ac8da953360cc84ba9e3b9
SHA1
cc682e17c3afd89beb48a92d7ab7fab68b52a96c
SHA256
35875855ccb30d1e627cf6e10f815214675c17bc5b4d548ae3e159b6944ed7e0
SHA512
2ddaa7b872317bc2e5dca703c56517b1e77e2abe389bf6e15bf5f6db773fa60167355f1162c6b1b78db2f6cb04aad1fe1125b9c5d0275b81063b9d47775e4457
SSDEEP
3072:A56S3Vbw3Zw3KslH6kxaKMXkNyGgWewlxKcWtLyEZBkBGGu2o9i6D/nou1:SjVGZDs0g5yYew6JLyHum6jnoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2bd0034e67ac8da953360cc84ba9e3b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Bert
Check
Did
Duet
Is37n
Lose
Piles
Stern
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE