CNUtiFm
ZIvBexIKL
PKFTwlHf
dVREKGzj
JVcePEVRkZ
jkaHcl
LnKfyVmk
Behavioral task
behavioral1
Sample
b1e7da2bc1b1b73f783ba0d20b7d72d3_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b1e7da2bc1b1b73f783ba0d20b7d72d3_JaffaCakes118
Size
23KB
MD5
b1e7da2bc1b1b73f783ba0d20b7d72d3
SHA1
5bfb91eebea1dcbf5cc84bef65088cf8e4479390
SHA256
ecc37004c71be42bd5d8949ab1227b90c0e0a812fac10849a1909962bb25f690
SHA512
402c6c3459971b705961ecc6dc98150983c6051f8081bf4840cc1343f5f5f24e2bbafaa3a54bbe0e197625021d345a9f4600025b4697836a556a3a43db2593cb
SSDEEP
384:1WdthhGVWB2o3B12TVD9gUlST9UJRqrNlwL9w3z7C9Gjw7GVIC7Hc7zIg3qzlAeC:WthhUWgrjgmfmT3q9gxIUc7zTIlAeBg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b1e7da2bc1b1b73f783ba0d20b7d72d3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CNUtiFm
ZIvBexIKL
PKFTwlHf
dVREKGzj
JVcePEVRkZ
jkaHcl
LnKfyVmk
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ