atyzgn
btpltfm
lyrmtga
q
Behavioral task
behavioral1
Sample
41e98d39f067c426743a0990c9e2b358_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41e98d39f067c426743a0990c9e2b358_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41e98d39f067c426743a0990c9e2b358_JaffaCakes118
Size
288KB
MD5
41e98d39f067c426743a0990c9e2b358
SHA1
84d37f6258b10c4250a3b0a9b12bc1ad20374210
SHA256
9369fe22435465015b4f93c57fb35b7bbe3276bb1a71007478748f0f54eacb36
SHA512
4476543d1edd5da74c815fea3ec5a6cac5d0c022889142d96542927f0fc10aee16a4801c7dde20e10535c726e94a3ecd581c6f26582bd96b26fb04455da419e5
SSDEEP
6144:ZAKyoS/E8AI1ftqOwqzxLkYuhAkEyZhGW5FYu77TwLn7v1G21OW:4LEaftqHqzJo/EyZP77nwL7v1GHW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41e98d39f067c426743a0990c9e2b358_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atyzgn
btpltfm
lyrmtga
q
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ