mrxwqSCDNJQQERH
rsXsVMQHhlIpd
bYoVKZBQD
lKppwUDbUAUQNf
DTCUMjJ
FSnvDpbVAWQpK
YFtKHOBPSWRKM
tYznEgLYWPEE
QPCWHOyyZo
ukRnu
Behavioral task
behavioral1
Sample
27ee5a43a53aa0c9f4043938191960bc_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27ee5a43a53aa0c9f4043938191960bc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27ee5a43a53aa0c9f4043938191960bc_JaffaCakes118
Size
92KB
MD5
27ee5a43a53aa0c9f4043938191960bc
SHA1
3e70c115080f0e906a46392146bd99a20d348361
SHA256
ea1758a363d066da5f8a007bf0820f7cc4ccc8c7e5a9bb32bf79a10b208d21f4
SHA512
95dba6c4af2e55bb0d6430ec505ce7b88b6c964a90d940799a2482dc303d7ef92225401c6f9906231b71f5ba42455fb3b4add1d696c6f67f95fde830a232f841
SSDEEP
1536:zICvF+xL31yFmFF7Bb1q0avp4XZAWVoYidAYh+bukd0X8N/ufCTwbiyy4h0jgONm:rF+xL32mbVs0Tp7VoYidtwbV0SrTwbiO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
27ee5a43a53aa0c9f4043938191960bc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
mrxwqSCDNJQQERH
rsXsVMQHhlIpd
bYoVKZBQD
lKppwUDbUAUQNf
DTCUMjJ
FSnvDpbVAWQpK
YFtKHOBPSWRKM
tYznEgLYWPEE
QPCWHOyyZo
ukRnu
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ