fam
opkpwhjq
vxheadwr
ybgreq
Behavioral task
behavioral1
Sample
8961f7b6782bbc6b340f2dca5a52c1fa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8961f7b6782bbc6b340f2dca5a52c1fa_JaffaCakes118
Size
121KB
MD5
8961f7b6782bbc6b340f2dca5a52c1fa
SHA1
159d68e5e23635ac6c15351defdab49afc34d258
SHA256
74081d77bc732b393b8a3a0afd62890122154c4d4ba0cdfadb390c9542057749
SHA512
7dcf3767395fa4c2d74fad678b185c228c1245904d3a217fde57505fbf1e46a9e7e5e3d84c79979738e74e5b123a5744be12208ef11bec4b6edab4a3c65a5c92
SSDEEP
3072:uiUlGzqSKYFzmSRtdAPCWl11VVCJCg70X8R2aGBJJlPkb:6k3vVK1VVACu0X8EBVk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8961f7b6782bbc6b340f2dca5a52c1fa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fam
opkpwhjq
vxheadwr
ybgreq
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ