OOefxPXimEw
VPlEIf
oqByGFRn
rqnkZDaoqlRy
ysYBfM
Behavioral task
behavioral1
Sample
727c848d1ad64b94cea3fac17e015b97_JaffaCakes118.dll
Resource
win7-20240705-en
Target
727c848d1ad64b94cea3fac17e015b97_JaffaCakes118
Size
173KB
MD5
727c848d1ad64b94cea3fac17e015b97
SHA1
1cbf8fb13b9921956e3632dc9ff4f953b6887352
SHA256
8849dc6c241ee220be6f67c35f431f37e8cc81bfcd662b4f2ba7956b3bc6f4d5
SHA512
1539d61225419e6a85da6e795beae8d6fa265f7e5b4f54e8f37ab1823a9e1e55ac3eefa87c4fd9be01d1d73b32e0e7e328ef76c2272438eda0b11f8c9a00482c
SSDEEP
3072:nGpqjE5L3UnzFgNtBEFImAmHqkAPpNcsv+Yc8ABmlueCTlQ/R:nG6iLEnWc5KkAPpJGYTEmQTl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
727c848d1ad64b94cea3fac17e015b97_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OOefxPXimEw
VPlEIf
oqByGFRn
rqnkZDaoqlRy
ysYBfM
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ