MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
e1fc7db78439acd387001e7262118170_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e1fc7db78439acd387001e7262118170_JaffaCakes118
Size
13KB
MD5
e1fc7db78439acd387001e7262118170
SHA1
1ab9559e977c2ff6c4a5ba7bb64c96cfa11307a9
SHA256
5e61f56e3932ac245377be39f98cd3eb6236ab820c46cde7c49dbe1e98984b4b
SHA512
fb790cb13a84650f4aad8a8d81c3160c4c5580a53fc2e3f1e92b448ce5976bdc36d82f1e933f960b8d600457369168fed7580eb8ab64d39e66e734abe1539f4e
SSDEEP
384:swmfavFJi6KYbti5W5n90lvG/Of+oetlKR07:sJSs6KJ2nsvGGf+okOS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1fc7db78439acd387001e7262118170_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ