MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
0a4fe5ac101b1ae3e628cf545afbdb2a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0a4fe5ac101b1ae3e628cf545afbdb2a_JaffaCakes118
Size
16KB
MD5
0a4fe5ac101b1ae3e628cf545afbdb2a
SHA1
520a7f37ededb605da4b35737059bbf451573495
SHA256
a33519d021a66ab9962d37745de510ededf04d29dfea2d7e57bf0aadcfe770ee
SHA512
681c812546e45a72b509b7bc9ac9256db328ed66927823a48c23060f10a021ab4a91f13ebe7ada1b6145759cf2faaa1c67139f5dc09e7b1b137c1e97d0591583
SSDEEP
384:s6/KXxMju6x8TSSKX2jTCRIfXElq7fJRp5De5TweGpkNSCFwyO:sgjP9X2jyyjRze5weMkNSf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a4fe5ac101b1ae3e628cf545afbdb2a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ