MuzuWY
ZoDrfItyPf
lzfybTn
wTJlmtHJLv
Behavioral task
behavioral1
Sample
d05523ee34141e19ecc749411c4ba171_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d05523ee34141e19ecc749411c4ba171_JaffaCakes118
Size
171KB
MD5
d05523ee34141e19ecc749411c4ba171
SHA1
46152730a9dfefb584fe9fcdc90d075bd569166d
SHA256
969b773e5f76983feb1977f133690c0100a4bf7775f983d045d6be736f73660e
SHA512
3b784feb7dd775618bbebdd34b3c7a0e6a998009c1f4f2fbf0f85e88e045c90a53d7572e2b74681d8ae99c745427397e4eeaf587b43dac78aa4fd7df2592dda9
SSDEEP
3072:kKGxFTdFpPKq/Y/SZv6Ka7w86Y9akrXNpw/rsvgm/xGZjFZ/hlfJdh6ziQ/6g9:kKGxhdFQq/Y/Kv6Ka756vRTsbADxXfpK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d05523ee34141e19ecc749411c4ba171_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MuzuWY
ZoDrfItyPf
lzfybTn
wTJlmtHJLv
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ