atyzgn
btpltfm
lyrmtga
q
Behavioral task
behavioral1
Sample
be27451f4d0478b75af347bb03f331f1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
be27451f4d0478b75af347bb03f331f1_JaffaCakes118
Size
36KB
MD5
be27451f4d0478b75af347bb03f331f1
SHA1
819b75f05f504122cf0dccd0b399b7a3d4563a36
SHA256
ec8d021637a3321b1298f462c5b55cb8efad6a5fb5c8e689d1558d529fd8e9c4
SHA512
3bacf27e55e09280469b81cde8547f4191c48a8243e66f5e7b33a42953d5fde4ab4a8731accad9d040eedd8cba4c43f34cd00cacd58a3c499ae6b616782aaa14
SSDEEP
768:3dMml8wCMlAqtXZ2eitkNFRCMTmvbR2zEOs6D2Cq+QYs:36L44ezpCM6vN2ds6D2CKb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be27451f4d0478b75af347bb03f331f1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
atyzgn
btpltfm
lyrmtga
q
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ