l
myxxdxjtvbp
Behavioral task
behavioral1
Sample
d34cc50af37c572a0c68486619f4a43e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d34cc50af37c572a0c68486619f4a43e_JaffaCakes118
Size
300KB
MD5
d34cc50af37c572a0c68486619f4a43e
SHA1
739fa29cafe8028b61c571f395e0c65eb09d10a7
SHA256
8c2169605a006b939272abebb80be938f7d6ed3175c6139fec75a2ead839097e
SHA512
d9254bed21dc6e5990399ab9330f913367ef06324b5e847a10ea273c4dfa3cbf4e026065394fe6b30d4594c44c09a77f48088e1c481b7bfbc471e6b85ad1849d
SSDEEP
6144:K23UMatdZVa6HjU9ICkLOajFQom/CzcCLA48CInUk652gz/d:cztdDa6Ho9Inpmom/CQd48wd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d34cc50af37c572a0c68486619f4a43e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
l
myxxdxjtvbp
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ