IwcGPZl
LaMPrpQ
ZVkDoPZD
ieIbrZBe
Behavioral task
behavioral1
Sample
d50de26e741842e6e76bc60f7d3d5862_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d50de26e741842e6e76bc60f7d3d5862_JaffaCakes118
Size
173KB
MD5
d50de26e741842e6e76bc60f7d3d5862
SHA1
86794bd7de9ca3c8ad40367f482491f90650d651
SHA256
b9201b45c237f74def5a37822f013c4777900e9ee71001d9ff4ec495fe67405a
SHA512
b8d0c98b17de22ea78fb077b5984e5617fd18db6e3db81ece1336aa3924c6b85010c9950fed817ae119d40b11f1c1b6c6bb80f52a76cdc6659482e0cf7856a36
SSDEEP
3072:WgZk7Z09VGmu5CqyR90d8jJaq8AJ3rkwNOTEs4vHK0gNXBqADjuGa:jZ6+VGmWCbP0dYbVkwNv/vH4XBqAza
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d50de26e741842e6e76bc60f7d3d5862_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IwcGPZl
LaMPrpQ
ZVkDoPZD
ieIbrZBe
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ