QNuDcSNzm
cWALLNYfDay
nadQbIRrx
pfulQgqlU
Behavioral task
behavioral1
Sample
75d5c81ec8116d92b439af2959e2fd94_JaffaCakes118.dll
Resource
win7-20240708-en
Target
75d5c81ec8116d92b439af2959e2fd94_JaffaCakes118
Size
173KB
MD5
75d5c81ec8116d92b439af2959e2fd94
SHA1
01de439f71163c899268a6ba8337b33d1f3af3ab
SHA256
ec19861c28d89ef7fad8bc98e4faff13194281a4889219e8b3fc4cd0dc5118a5
SHA512
05f1cb196180c084f26bb63ee85a714187a5f58a0812ac59e4646977e9ee2742e86314a88a60cbf6f96dbcd7964216c2ced52b9eef1c2b1b29d307e7d1827be3
SSDEEP
3072:FyKLnFWX3S70aqxUnYM1rtCEmjGZa8IB9n7N8zfQD64ZmNOq5K/in0aaczXi:FnFWnR5QDrCZ8IBlizfkHZ4Keac
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75d5c81ec8116d92b439af2959e2fd94_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QNuDcSNzm
cWALLNYfDay
nadQbIRrx
pfulQgqlU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ