CcyctMipPhgA
QtBYrhDw
YEIhzPiN
aGWIBaogOSjP
iGEmkywKfOCv
Behavioral task
behavioral1
Sample
e0dc92c30ae3865ce85c1a9c03d8db00_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0dc92c30ae3865ce85c1a9c03d8db00_JaffaCakes118
Size
171KB
MD5
e0dc92c30ae3865ce85c1a9c03d8db00
SHA1
53b217ce0063a8333002623547c517fce5e4cccb
SHA256
c6c4e2da84ecb56020ae91f4c0b1d1d7b239d49892dfd4e8273e7f60ab99ea83
SHA512
1a55f6a7b928b03029678cd193a7468c39b26cc79c633332c49d4fa4f044ddb9646a06ab89214d056ac1d7643d2b1a6521e81ebdff9ced2bf0d156a985730c40
SSDEEP
3072:FIgNqg/3OmUg6Np3D1xMZ7XYqy2gGgvbDbe2hUFBgulvK+PTWkOAYw+36ZaCVDoH:FrNf/3Omnyz1CZRy2gZvbDqgkXKqWXAc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e0dc92c30ae3865ce85c1a9c03d8db00_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CcyctMipPhgA
QtBYrhDw
YEIhzPiN
aGWIBaogOSjP
iGEmkywKfOCv
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ