atyzgn
btpltfm
lyrmtga
q
Behavioral task
behavioral1
Sample
278c651ef10d8fef71d57a4a4a911939_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
278c651ef10d8fef71d57a4a4a911939_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
278c651ef10d8fef71d57a4a4a911939_JaffaCakes118
Size
282KB
MD5
278c651ef10d8fef71d57a4a4a911939
SHA1
e2d67f9df0d75740675dbfcbe1aed40d40c6d868
SHA256
88278e1e46c485467e5b69e98e031c009a0713b39089e126f6987837f4d96f57
SHA512
f299de634f1bf90e242e3d3841d0b886fbb48fdd866d2a37e8b771e1301200c5a2cd634950e63ea1750e274ab7ba538ffa92f1eba1425880adf827031f01fbe3
SSDEEP
6144:U/6Mt4oi1BqLORSUUwRZ60hM6Oaj2P4ugoSHr2MDvJ/KoSw:1Mt4rBqLgdvR00hM+j25goSHyiKoSw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
278c651ef10d8fef71d57a4a4a911939_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atyzgn
btpltfm
lyrmtga
q
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE