atyzgn
btpltfm
lyrmtga
q
Behavioral task
behavioral1
Sample
2ce2411bcb5d86cdcbfb171c9f7cbce9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ce2411bcb5d86cdcbfb171c9f7cbce9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ce2411bcb5d86cdcbfb171c9f7cbce9_JaffaCakes118
Size
280KB
MD5
2ce2411bcb5d86cdcbfb171c9f7cbce9
SHA1
fec90dacdb2ab9bfc27fde81212e9390e95b8d63
SHA256
8b1f1593cd4c0e9f9ee5a4dcd9eb3a153091c7b25518c951b5fd92d8cb8f14fd
SHA512
1157d519e317211f0ce374fb2bb6639548ed044d6ee0d783cc861225c272860afd1d4a5cb9b65f5539a977a74ce731988278adf9084da0273e8aa1c1cdb16963
SSDEEP
6144:0qkIq/8puW9G1Uc8W3xgJrR5/D0gVLcgJ774A7xDxkqJkoS/:+/8pv9en3xgf57JQg94IqqOoS/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ce2411bcb5d86cdcbfb171c9f7cbce9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atyzgn
btpltfm
lyrmtga
q
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE