lxtub
vtdmg
xptcupl
xylutxzr
Behavioral task
behavioral1
Sample
bfe5f8e8a52a7e493cbbe709fe825f08_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bfe5f8e8a52a7e493cbbe709fe825f08_JaffaCakes118
Size
300KB
MD5
bfe5f8e8a52a7e493cbbe709fe825f08
SHA1
b19ed1644ffe69e1a4cb40766197c1ec23b4ee88
SHA256
b2a90feb6433fee24d1dfb5d69dda0e9cd943e5db354e596c92ed5640426c24c
SHA512
283d7bc161fe9de9e657cbce7de1b2cd73ec2a735cf82d020431ecee807d9bfb11f000b55d197393379303756f28b497589f366b4bc6f34c458adf7f708bf780
SSDEEP
6144:5wz8ETl2K9CxPaCBpc8S4Tmj6ptovVyi+HE6ZMsfvNfJWE:24ERP9Cxa4Icmj6p+yTHEQBfvj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfe5f8e8a52a7e493cbbe709fe825f08_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lxtub
vtdmg
xptcupl
xylutxzr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ