PbCJpN
UBeYSNXNUDGs
dXerpS
lZFzncsYJ
vctfxU
Behavioral task
behavioral1
Sample
a5be95654d417eb7b3c2d1da01679b14_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a5be95654d417eb7b3c2d1da01679b14_JaffaCakes118
Size
171KB
MD5
a5be95654d417eb7b3c2d1da01679b14
SHA1
c5169095fc0caee24e920fd79fc607e6b29359fb
SHA256
c7555eef014c478e367cfd1d8e2ec8bca6ec462035d9a48ed732e77cf279563a
SHA512
334db12de72afb330f0a0d2117d4660a39d30c80b3a75d7fb7345655c21b22693c4e6fb5c157cc35e8bba6c2e4d9581b28c6405e1aaa0ecf5717e9dc1c8465ad
SSDEEP
3072:YlNMgK4yTWto2+PcvDNLfLJC/NMTULlf7MGVk44Se0uUBstiTOL8nt:YXMN/W4izJPiljXgS9E8nt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5be95654d417eb7b3c2d1da01679b14_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PbCJpN
UBeYSNXNUDGs
dXerpS
lZFzncsYJ
vctfxU
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ