TQXfPmQrvjTM
kRkBaPlJQVuW
sFKiLLFqq
vgbzTYTyK
yKgCwVh
Behavioral task
behavioral1
Sample
3f8c616d1943230c40284695e5240231_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f8c616d1943230c40284695e5240231_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3f8c616d1943230c40284695e5240231_JaffaCakes118
Size
171KB
MD5
3f8c616d1943230c40284695e5240231
SHA1
a4e3e8f5739c7a4fd880c468a95734f5761b22ac
SHA256
b8ccea3334bf2902ccbd38f06c0e53dc1f57aae51298d160d232dae0efff9106
SHA512
34c65ff7eec532220ee130c05a603fc32e9000fa6fbbd190b163ccb02fb282a14f378383e9116a1bf56490c95785bb8bf7f23b371701bd8544e5d0384d4122fd
SSDEEP
3072:7wXLXzmObZUdPebofhIc189K9gm67Cr3TZhD1zvf6CSFMxL:kX3YmbEmtAWm0CrjBznAFMJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f8c616d1943230c40284695e5240231_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TQXfPmQrvjTM
kRkBaPlJQVuW
sFKiLLFqq
vgbzTYTyK
yKgCwVh
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ