BXJUwu
OORdzv
QZuMet
SCkQHS
SjTOgeVjafNm
Behavioral task
behavioral1
Sample
ff2d8db094fa404ab2621f62371c0d54_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ff2d8db094fa404ab2621f62371c0d54_JaffaCakes118
Size
174KB
MD5
ff2d8db094fa404ab2621f62371c0d54
SHA1
2f9aad727cf01414c687f34a8030d19890558a40
SHA256
7b22a2eefae746af1e4167f1cf5b151096314c50058b5f88fb4923fd915e5b5f
SHA512
74143a6776c14bcbdacc8e0a14a0d232c661616f75b162409ff727d2ae06780ecda61564044cfca109332c32a8f7a716417038266d4f3f51910f0645e5b192b7
SSDEEP
3072:DlNAxBaeH98lBNji0bAfKacAeCBeHQeY4vFU219u2w/zR3x3SQHpIvSHkK:DXded8lB56jP1e0U94/zR3supIKH9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ff2d8db094fa404ab2621f62371c0d54_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BXJUwu
OORdzv
QZuMet
SCkQHS
SjTOgeVjafNm
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ