FaGSFamILpOUzw
OGXrRBCkZQCLFVA
FxVHYFSTQQwavNA
hDVADjfaBPhB
jOefNYufQNJgyC
ZrbkLyrC
Behavioral task
behavioral1
Sample
a3dec3eea4a3b8f452d35277a5299b72_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a3dec3eea4a3b8f452d35277a5299b72_JaffaCakes118
Size
202KB
MD5
a3dec3eea4a3b8f452d35277a5299b72
SHA1
07b22a41a0ea5faeaa33482e47f63f83a84a6100
SHA256
91a3095f4014ef70dda34ef4a037f33c389a89026b215f5c9c819012346c3f34
SHA512
12c53a80f6594b78b14bacf55553b54d8108142fc234b23055e1253b877adb897c9aece1c8fd17779e594480cd6b07d8b6a6d7ca8f514cabe56b3fee9fb6697f
SSDEEP
6144:jgchI7b1y9qUCdxW4rAGi8ValurMbgCYSwZqf/1:d+aqUCdx8aMluragCWq31
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a3dec3eea4a3b8f452d35277a5299b72_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FaGSFamILpOUzw
OGXrRBCkZQCLFVA
FxVHYFSTQQwavNA
hDVADjfaBPhB
jOefNYufQNJgyC
ZrbkLyrC
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ