blpvO
Ear
Elm
Games
Klaxon
Mario
Talon
Webs
Behavioral task
behavioral1
Sample
5744a0e27ec766e82e2c70a3caa3486f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
5744a0e27ec766e82e2c70a3caa3486f_JaffaCakes118
Size
152KB
MD5
5744a0e27ec766e82e2c70a3caa3486f
SHA1
17be1e2ba9d4edd8e20bbd87acd367180e8bb07c
SHA256
f48023184ef2c707a36cd8676a81a8bdc0990af0840fe2097c933efcfdc2602b
SHA512
7266390ac554ab10d2d347b53aa7d837ba7b63afdf6a88e23bdb952695a42f6cd1d1b619657feeaa33bd74918d6ae9f0c54737e9599e9e987c3ece519bf99cf0
SSDEEP
3072:kbC3+KqGAeDn1MaF7n66ExClw1eVeZbt7jNY2JQYJTkddA8tcWou1:k3lC1MM71EslwAVeL7/J0RKWoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5744a0e27ec766e82e2c70a3caa3486f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
blpvO
Ear
Elm
Games
Klaxon
Mario
Talon
Webs
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE