Cans
Clink
Dude
H9922
Mats
Behavioral task
behavioral1
Sample
464428be5143d28f073bf70e93bcf41f_JaffaCakes118.dll
Resource
win7-20241010-en
Target
464428be5143d28f073bf70e93bcf41f_JaffaCakes118
Size
160KB
MD5
464428be5143d28f073bf70e93bcf41f
SHA1
0a52320749fccba8e9a650343821ef16bf5da8fd
SHA256
014fde506c3136b37e2958f0a41a97eef7092405d1f2058d39a4cf3ffbb5fdd3
SHA512
52cd1aae45a7f445fa3792519f6c0d26b7285c92d9e831ea1fd32175d8d9c531fd1f8b8f3212022e2809917f792e68d856cd7c30550866085e3786c8d27bfe8e
SSDEEP
3072:b23CalcEuAO9kVizxjPsOYc0mALAxKnGC6wznyC8bhKyc7ou1z:QzCK2kVihsOYc0Pln6wznvkhpc7oW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
464428be5143d28f073bf70e93bcf41f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Cans
Clink
Dude
H9922
Mats
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE