JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
f6292c68ccf47a080fcaa2a7a2149d64_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6292c68ccf47a080fcaa2a7a2149d64_JaffaCakes118
Size
215KB
MD5
f6292c68ccf47a080fcaa2a7a2149d64
SHA1
197e4e7eaeb68a137b85df0243fad761471feb1c
SHA256
494e0e1407fdf7da5c4b2edf49c1ce01ef5f922595301becb7457cd652427802
SHA512
6b8d49695ab88a5ffd4c7a5abb79713a9dbf9b434ecddf051a49ed06567e4d7fd37f4554529e544b34b7d8dbbe2eb8e5aea19e445eb3046be654e188919322a3
SSDEEP
384:0Bs5Wvt9yp0dXDgABQVmRAje5WgMgAp9lqcgqm:hGt9yp0dXDgnq5ugAp63
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6292c68ccf47a080fcaa2a7a2149d64_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ