atyzgn
btpltfm
lyrmtga
q
Behavioral task
behavioral1
Sample
49319a53fdd45b6f3bb7a7466bf4318a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49319a53fdd45b6f3bb7a7466bf4318a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
49319a53fdd45b6f3bb7a7466bf4318a_JaffaCakes118
Size
51KB
MD5
49319a53fdd45b6f3bb7a7466bf4318a
SHA1
0518d08ffe1631940c55e04441566b45121a1275
SHA256
23c3425d3294c8a8392ff47331b3d57eaa6f84450ff7fe60a769a1e457fb3444
SHA512
1101e7911a3fa5f50fedae5deb96007be17999fd02ef563b76dfa575022785719ed1e1225876e66b840648ceb4cf1e577572a64b60a2aa2fce68895d5f823f32
SSDEEP
1536:5zR3GRJq/y6DSo6zs9eYz5tM+8qWNhjfoUUG8ACndUVwrugnouy8Id5:L/y6xeTOW+23jtUG0ndUA5outId5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
49319a53fdd45b6f3bb7a7466bf4318a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atyzgn
btpltfm
lyrmtga
q
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE