JNgeIkAAXtL
PxACuPVsY
QTedhHOSii
iPfAxmGynwaK
Behavioral task
behavioral1
Sample
ab9a1c976ce44fbbb0cf3c1f037e64ec_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ab9a1c976ce44fbbb0cf3c1f037e64ec_JaffaCakes118
Size
173KB
MD5
ab9a1c976ce44fbbb0cf3c1f037e64ec
SHA1
63f2df1c3eaf4bd50386f05fbe1a13404cc01e8d
SHA256
cb2bf730dcf936856c6a2223d611d0034138937495d8cbf20578061e6f17f231
SHA512
b4eb63a314ef78e417a4cb112f18dd2a08027749ff64a6a7944f7971ecfd87f9a1300eeef0542caaa9d902e3fdc291ad16361f152640f6ba52e4e94f264b7ab1
SSDEEP
3072:cOFty4o7BYfPSnCQrljd3UFlq0pEfFHdenMWjrRm8hn38WikEFRE:tFc7BGPSCQBjd3UFy2Msrpp8WLE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab9a1c976ce44fbbb0cf3c1f037e64ec_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JNgeIkAAXtL
PxACuPVsY
QTedhHOSii
iPfAxmGynwaK
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ