atyzgn
btpltfm
lyrmtga
q
Behavioral task
behavioral1
Sample
40e11b3620496dfccf59602e284fa2ae_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40e11b3620496dfccf59602e284fa2ae_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40e11b3620496dfccf59602e284fa2ae_JaffaCakes118
Size
51KB
MD5
40e11b3620496dfccf59602e284fa2ae
SHA1
701fe0e78cac169c1b3afd73b1a4032230eb436f
SHA256
99df92392753d208f4660053f9ffad14738ddcb1e98d777a6ef231284d8cc1b8
SHA512
746f3da0e4d4921fef73bf33f7e94067ed3a3835f302be846329bb0681917dd6ef73ae036fb8644516949487a70d8ccfec09118ed7b1aadb0e513923d7d8963e
SSDEEP
1536:5zR3GRJq/y6DSo6zs9eYz5tM+8qWNhjfoUUG8ACndUVwrugnouy8Idi:L/y6xeTOW+23jtUG0ndUA5outIdi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40e11b3620496dfccf59602e284fa2ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atyzgn
btpltfm
lyrmtga
q
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE