FiWQPqSYq
mdwtTmDA
rDUGRNHo
socBzrhC
uRHyng
Behavioral task
behavioral1
Sample
74e48127d7934dd5f8f520fa2e4fc129_JaffaCakes118.dll
Resource
win7-20240704-en
Target
74e48127d7934dd5f8f520fa2e4fc129_JaffaCakes118
Size
173KB
MD5
74e48127d7934dd5f8f520fa2e4fc129
SHA1
876581e8dc491bc27486b31461a222e573f21507
SHA256
b9aecea9930483ca1b3e35dcbfa91740643faf3af54c968b636f235953b3d347
SHA512
7228abbdcdb7cfc24b252cfa4517d36ac5bedc7f846cbbded0c1e85a524387b51603d6b40b7765af062d524bc33bfb392b6c954ec86ed4952a5116b70866803b
SSDEEP
3072:082+krVAL+/uPvCTk907sC7tXFIeC/ssh/WZOijMiLOWAI7CVglE3Bj:H2FrM+/uP6yPChCBlh/WZh9uml0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74e48127d7934dd5f8f520fa2e4fc129_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FiWQPqSYq
mdwtTmDA
rDUGRNHo
socBzrhC
uRHyng
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ