UTRhfiZBwtPlrEu
tzrNSBKtgy
YRMGFithl
rDXEgWnMNTOB
PqcNiuNMWpTA
Behavioral task
behavioral1
Sample
40179394873f201fe572e90d5a53ef99_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40179394873f201fe572e90d5a53ef99_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40179394873f201fe572e90d5a53ef99_JaffaCakes118
Size
142KB
MD5
40179394873f201fe572e90d5a53ef99
SHA1
505259b6fe586f4a69fbbbc0b5e79af4ee25abd4
SHA256
b4e6bbbc4d5ba4b5d6a1adf780ff37a5561c284a06e267bb29eff1f73cbf4766
SHA512
09d48f78f0daa7398a11cd2df5084a2505c93188c7b5402127d522664ca81658ddf91ae29fe34b41fccd9cdd05ede3d50ca6965596f9ad244fab410025499f58
SSDEEP
3072:w3RkqsxPb1piSLA71r3bpsFpFRBC2XxIgAt5kfiXc+uOlD+S7yW:FqQRASLAtbpQ/Xx9AcfRc7D
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40179394873f201fe572e90d5a53ef99_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UTRhfiZBwtPlrEu
tzrNSBKtgy
YRMGFithl
rDXEgWnMNTOB
PqcNiuNMWpTA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ