Annie
Cops
Raked
Swampy
Behavioral task
behavioral1
Sample
3b3375a232adfeeda3b35304ae709e5c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3b3375a232adfeeda3b35304ae709e5c_JaffaCakes118
Size
156KB
MD5
3b3375a232adfeeda3b35304ae709e5c
SHA1
4195d4e0d9f0ae05befe4a7f063e0e8feac51552
SHA256
619d32d5fc119426f9c548bdc4ca73d9f8d7efd93bad17cc0d9171573bccfd8b
SHA512
3a6d7d249cc5f90d898d7e690fb419d8abe9b2f22b2bf0ce6f276ac5ce8333635984c2dfc4a6b13ee92ea16e214f68de9c6908e5658e3f9f0fc04f68c6932b4c
SSDEEP
3072:pKHsVFskvB+DuPXss493wjXSt3oWOboiHcFdc8o64TvtEj29V/Cq7outQ:4HaFBjNjM36oiEdlorLGj29Vn7oS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b3375a232adfeeda3b35304ae709e5c_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Annie
Cops
Raked
Swampy
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE