Xvtpsrf
agWoAN
rZXcNmdnHj
update
ylDfeqCYyjO
Behavioral task
behavioral1
Sample
8c5a207f6a29536f53c60ef10b47c172_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8c5a207f6a29536f53c60ef10b47c172_JaffaCakes118
Size
172KB
MD5
8c5a207f6a29536f53c60ef10b47c172
SHA1
0ba88780525fd8582418cc2245b01b175d9ae88d
SHA256
27a5bc8d50d22a5d0664ee94704abcc5fc18d399717b387812d9859d0d32a56b
SHA512
bab54c4fc9f7e5a1609491b1a1c276b36816fd58899f1445498af397a42ea4dde1ac436880013f340346eda2d2295a786f3c1ea0c4d4166c64048e3c9b6ea925
SSDEEP
3072:aiNCwQRkTK6og/eorwiBR1DzKW0EVnrzn3j5UyRmvJ+tV8FdGLeCD:vNCNRv7bo9BRr0Uf33QvuNSw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c5a207f6a29536f53c60ef10b47c172_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Xvtpsrf
agWoAN
rZXcNmdnHj
update
ylDfeqCYyjO
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ