CaZyQSBkcj
JUKUykpjjS
RZrpVC
SehJutvfAel
nJTNRXvR
Behavioral task
behavioral1
Sample
fbe26873b818fe7dd8e9e467a79d4ce1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fbe26873b818fe7dd8e9e467a79d4ce1_JaffaCakes118
Size
171KB
MD5
fbe26873b818fe7dd8e9e467a79d4ce1
SHA1
6221463e3d6d84e1e0ce71addff9a33a60df6434
SHA256
0a5fd5de678ac6501c93f0e4b2a967f2e7a0961d9bd058c032fc7ed731244849
SHA512
835d864ba1ebcbcb1b93ee82f19ee9a9f2b81feb6dc2a4382e2f0e7c4ec7050f956a1132d6a04d20252397caa23c7bb69aaac93901b297bf96c6d158592a22cc
SSDEEP
3072:JrNALk4Fxkmf4qXhG8QcgwyHrULxzWKTGzNZCKfyn7+/hx8qdZOEKyau:JrNq7FaW4qRGvckHrQqKTGBcK3hSPya
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fbe26873b818fe7dd8e9e467a79d4ce1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CaZyQSBkcj
JUKUykpjjS
RZrpVC
SehJutvfAel
nJTNRXvR
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ