81Snt
Arnold
Cloud
Mosaic
Vinci
Behavioral task
behavioral1
Sample
54dac5a78a62a02692c1be26e24a6fdc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
54dac5a78a62a02692c1be26e24a6fdc_JaffaCakes118
Size
152KB
MD5
54dac5a78a62a02692c1be26e24a6fdc
SHA1
4aa95c07a60a0cc5ae3ac52b256903d450a8f129
SHA256
f68e26260c23e7464e9033825d9891b1c5a737f66ba103d6676798094600c99d
SHA512
a2140d5b840f341ce6e5339545c42ba1d01a3549409238672227aab6b1d90b70a91e109c439b33d76095a4475d1316ec13e8f4ce8e15ee3b260744d652336277
SSDEEP
3072:mAOjNX2NhAR5Spq7b1QfaAhaPocIpYyWxEqAAidB4Zf9Hua2OSou1I:mAOjNX8IMq7mfdhaP/IpY5fQdBIf9Oaw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
54dac5a78a62a02692c1be26e24a6fdc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
81Snt
Arnold
Cloud
Mosaic
Vinci
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE