QDupBBx
RTSTuS
RoTDmnPP
eIKOtrIY
Behavioral task
behavioral1
Sample
a2b4314f630e06151d078d106502ba7c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a2b4314f630e06151d078d106502ba7c_JaffaCakes118
Size
169KB
MD5
a2b4314f630e06151d078d106502ba7c
SHA1
8e066cfa5c1786cd0a06caf41b973b612f3b20cf
SHA256
90afc46b0d95f47ebbd12bcc26215c02a141c2fa95d5ad7c73783a9691b60a65
SHA512
122286978880d02e99cbbf5a46f411c384475b027ddc5ddf74bb7fd9a9359b757ac049e26ffb0ac3ffc0b2f9422cf19c03414aa16b752ab8eea16f2282893099
SSDEEP
3072:QhlrmIQJgiC3YoglKmayp0C0OfKyVqtG3mT8nphAtwrk5H5bdIbiXZyFQVDlBJA:QeIwtKmacwYmWqmryZbHX2QV5BJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a2b4314f630e06151d078d106502ba7c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QDupBBx
RTSTuS
RoTDmnPP
eIKOtrIY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ