ArCddDsb
LuABMSUy
TtmqtX
ZidiNa
ygoxHZlPqWdo
Behavioral task
behavioral1
Sample
364f7fb2bc6a03400285d28c3d72c9ef_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
364f7fb2bc6a03400285d28c3d72c9ef_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
364f7fb2bc6a03400285d28c3d72c9ef_JaffaCakes118
Size
169KB
MD5
364f7fb2bc6a03400285d28c3d72c9ef
SHA1
a7c606af3d996a478c38f2ba87710d409db55411
SHA256
27652bd29ec71678688cf40580bc2c7bc5d3d4755d4072f5c0a8b820b7be672e
SHA512
04fc3237d459b630ff25d6ce856de228be237dde0c0c3f89ab6774b8276ed8830e39ff4c02e8eeed2f9d5dd62b9d75514f1a4e1fabff6f2cf5d6790e990d7bac
SSDEEP
3072:klNAn8j9M+MMix+l/zw5x+O58SAppBt5gP8XDEVS1X7ZHqRNTKmO5WXwdu:kXsi9M+Yx+mWSmHzEV8ZHWNOmO5t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
364f7fb2bc6a03400285d28c3d72c9ef_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ArCddDsb
LuABMSUy
TtmqtX
ZidiNa
ygoxHZlPqWdo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ