ACrVTH
ObjpyfX
VamsYy
fFfMyRGDjB
juEAfF
Behavioral task
behavioral1
Sample
be002625834984f7803e5f35fb5be1c0_JaffaCakes118.dll
Resource
win7-20240729-en
Target
be002625834984f7803e5f35fb5be1c0_JaffaCakes118
Size
170KB
MD5
be002625834984f7803e5f35fb5be1c0
SHA1
7a19a5aca1089f34cb10e100527c82f32a7a9039
SHA256
47c054e380a88482af57a9fb9d1e6c7bea2d08d3dd8958510e5a3c38df17ad19
SHA512
15fa8ce9005346fe32ca0372b263b687e6f95da3e4db4714b01350ce9e5c7287096292baa8e12bfe6f746984b8b612cf04bf1d9de57321b0d3d30bd6dc55ef49
SSDEEP
3072:+KG1lmEcIqVyQSC+W/881rE97Qq2HSTTkgFMNnZZj4/ezL8:+bmEchQQS7W/88V4scdMNZZ0/k8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be002625834984f7803e5f35fb5be1c0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ACrVTH
ObjpyfX
VamsYy
fFfMyRGDjB
juEAfF
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ