wICFOXWKgCFKcsf
FRDXxOLQs
HaUJHH
UMURMjAZAlvXbD
dViTtkFYIBvK
OnqRbqVGF
FDmISUDNeTEFZ
Behavioral task
behavioral1
Sample
5501d96887f504fe27052bd561d12c56_JaffaCakes118.dll
Resource
win7-20240708-en
Target
5501d96887f504fe27052bd561d12c56_JaffaCakes118
Size
78KB
MD5
5501d96887f504fe27052bd561d12c56
SHA1
f3e0f2591411a2eb300c2f4bb33aa01010658848
SHA256
da203e092438b51faaff986879109f19a106f2e212aa2778f26d2190cb26f413
SHA512
d3f3aa516eda7c09a3b3c38730032644b3b5208ef3558ca3372b4cddd750cc03450787e6679480f5fe8a12bdfe0eab98193a654d2741644c11ece163aa283e80
SSDEEP
1536:om0al3NTU8IEZP6/i2/SejQMYZiC4kCN1AJnouy8OhO:om009Eh/rLOxZoutOo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5501d96887f504fe27052bd561d12c56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wICFOXWKgCFKcsf
FRDXxOLQs
HaUJHH
UMURMjAZAlvXbD
dViTtkFYIBvK
OnqRbqVGF
FDmISUDNeTEFZ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE