IXOntXqC
IuIIHHrFVSM
RKZONxToePR
UvcrSAvhwO
rouApZjjxmU
Behavioral task
behavioral1
Sample
639d6fcdccc136675af8b7a6f5b369c7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
639d6fcdccc136675af8b7a6f5b369c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
639d6fcdccc136675af8b7a6f5b369c7_JaffaCakes118
Size
174KB
MD5
639d6fcdccc136675af8b7a6f5b369c7
SHA1
f431fe013c5821d42a179824986e354c7c05416b
SHA256
463c3d2d890a15f5ddc9041f0eafd24fb335c24329b3ae926b37bde844143e89
SHA512
e6cc23773e01357bffb4f3c585053285160b547c5378854e0784cd516e77ab4aa7e310329e86fded40dbe392c5dcb15d1c45fcf166b0baddaaf4b33d9858f5af
SSDEEP
3072:V5RnkuVKZAO1gJE5z/8fx4rhNShWa152zr+eSZNkc4JnY:V5RnkuVKWJE5c+hghW+52zaeS5EY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
639d6fcdccc136675af8b7a6f5b369c7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IXOntXqC
IuIIHHrFVSM
RKZONxToePR
UvcrSAvhwO
rouApZjjxmU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ