JLnwkmdVchK
MqVoSiXYgL
PPWddA
spNDOLu
vDyhDoikpFK
Behavioral task
behavioral1
Sample
1ab13ef94ca981c878192634b4cdff76_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1ab13ef94ca981c878192634b4cdff76_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1ab13ef94ca981c878192634b4cdff76_JaffaCakes118
Size
174KB
MD5
1ab13ef94ca981c878192634b4cdff76
SHA1
0b6fd7adcd236b498a53d76040b3b9185e15b12f
SHA256
2e973a7229a4861fdc3bddfd77f064c051bba9bf4f43ae33d195ea168418ae9d
SHA512
fd0b4407741130af1e5899bcb73f3e583b9e32c378778fe0baf10e032521ac88b018f7373a64107884e3b66471f4d1e9cb316f18a6c09283a1829630053e3b5f
SSDEEP
3072:kNzMNauUng6NHdIm9NgBNvtdm0SYiyOxvHosPQV7vv7AsGHYIh95BcaikqxXy:cY8uUgKiBNvjFAxvrPQVDzTIhvBcbhxi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1ab13ef94ca981c878192634b4cdff76_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JLnwkmdVchK
MqVoSiXYgL
PPWddA
spNDOLu
vDyhDoikpFK
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ