l
myxxdxjtvbp
Behavioral task
behavioral1
Sample
3ec2a744d6b71309f8cf11ea3f122a48_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ec2a744d6b71309f8cf11ea3f122a48_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3ec2a744d6b71309f8cf11ea3f122a48_JaffaCakes118
Size
118KB
MD5
3ec2a744d6b71309f8cf11ea3f122a48
SHA1
eb582abe3fb7468cfe8ca205ad119b7a2ee24971
SHA256
bf10aca587e79906477dba6cae3c12679d21e01018a92eae82d3655dd22f1248
SHA512
a3d06005ddebb43eae43ee7fea64ea0a7bfd9ac1e5ae5ea1247aee3c02dcfa536f9649e53023100d79d18b96533d0096a121aea0bd48e49fbf62083d9118d841
SSDEEP
3072:zG+/aU6i3FJMZzhaF8flxm5vNiq1pUemHON:zGKaU6YezM8fvmlQwU/H
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3ec2a744d6b71309f8cf11ea3f122a48_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
l
myxxdxjtvbp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ