ZtGame_IN
ZtGame_OUT
Behavioral task
behavioral1
Sample
a9365353441bd47331256c6211d0bac8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a9365353441bd47331256c6211d0bac8_JaffaCakes118
Size
8KB
MD5
a9365353441bd47331256c6211d0bac8
SHA1
e2dffc6a968cbf46b1ad887a07845816536e1c4d
SHA256
702ad70cf5a6354a09cec01b1d26b8f98975eceb2be845628fe74ed5bc3c3a73
SHA512
9182a053cf77e8dd19ef417688a91d970ea489f45b4b35d2c6d514c551fd14b04d2041b282bae45d95a6c69602add2e8f0df86febdd43f579c3cfb5d6007dd1d
SSDEEP
96:8qWwchBhdKUfZkrHChvhm7/cdlnf5hQvPQ62e2Kqir1fcjdr+8AeX:IweKUfZkrAgsxBmPQ6pmipfc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9365353441bd47331256c6211d0bac8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ZtGame_IN
ZtGame_OUT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ