Entry
H9922
Kidney
Rind
Behavioral task
behavioral1
Sample
41571b0a7c5f368ee7b5783790a09270_JaffaCakes118.dll
Resource
win7-20240903-en
Target
41571b0a7c5f368ee7b5783790a09270_JaffaCakes118
Size
157KB
MD5
41571b0a7c5f368ee7b5783790a09270
SHA1
7df15f2f7c6e3f106053b6b4030055798cc7283b
SHA256
ccf91aad24d2c45d51e13e3b19ae7cd850d7838beb66ca57bd937ec1c1b5ad41
SHA512
dfeb98fe30afad86687d7fb465599d3266bd89341ba77eeeebcd97db22d8861b55c7c3e07207b8ad8c06a51ce04b5ecb0cdf40e52c9f3f8881b842414ea0ed33
SSDEEP
3072:puVVzZjatF61DyNq1K7U+4c362vpwH/VOmuWvyi444vXb6ouX:QTIFjuKp4WvG/V9NKi444+ok
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41571b0a7c5f368ee7b5783790a09270_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Entry
H9922
Kidney
Rind
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE