GTEkSsGBJqN
HMmMosyxl
TYmdFncNXbW
crnzLMLb
yAdFGitGfiZi
Behavioral task
behavioral1
Sample
d230ac4b97d8812a96886e25382f07ac_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d230ac4b97d8812a96886e25382f07ac_JaffaCakes118
Size
170KB
MD5
d230ac4b97d8812a96886e25382f07ac
SHA1
e0241b1e121b0e61adc8596a6e6229b92342fb69
SHA256
49ae9a61ab0cec90a915b6dffe26af2af2f11146e15f0ddb7875b3f1a8a346ff
SHA512
333c9d27ea05f7670691f8809a32885195fd5c9b25cdcabcda10c05a420aec01c1413f9bb2d24189edadc0d4e3353e843b50ff4aa7a8a8e2f278c537872861bd
SSDEEP
3072:R/NutHtKnddgOAGJq0MsNOAMmTWkOAYYO36ENbIJ9u9mMuxrMwT05i:R/NktKnddgODXMsNQWWXAYYOKmE9+mM8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d230ac4b97d8812a96886e25382f07ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GTEkSsGBJqN
HMmMosyxl
TYmdFncNXbW
crnzLMLb
yAdFGitGfiZi
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ