atyzgn
btpltfm
lyrmtga
q
Behavioral task
behavioral1
Sample
be07976f78d074203115599e70448f46_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be07976f78d074203115599e70448f46_JaffaCakes118
Size
121KB
MD5
be07976f78d074203115599e70448f46
SHA1
7e9f3b79897e7745cfcd0c31cbd34a82cd91e7a3
SHA256
f3e3558d9d7b7cfae42e2d5023d308496ba0b5bfae994b17798234d0fcec50c5
SHA512
7401e7467ba433aa533c2e4f6f786abeb2bb4cce1ee68750a885cfc5794a6e103be75a866b02e4c6bfd4725d0be10e48ec0d3d7ac9dd0bceedbee3e8d2ace4c8
SSDEEP
3072:7sUtOc4ZN1BhoSfYZaGZagF9T+vePQZkpbj5fsg4w6kuVdoutNd:7L4rhoZBZ3F9avY0cbjOg4xnVdoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be07976f78d074203115599e70448f46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atyzgn
btpltfm
lyrmtga
q
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE