CTXMsY
PexzPmpe
TNxsVF
rHPEYjn
Behavioral task
behavioral1
Sample
105fd575941aab7fc6ea8ff911e93dd0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
105fd575941aab7fc6ea8ff911e93dd0_JaffaCakes118
Size
173KB
MD5
105fd575941aab7fc6ea8ff911e93dd0
SHA1
b800901ab291e9f6ed551ae971bf6747286d7e46
SHA256
7aa97db0031d4a7f6bb0458267d6ed2c1264bc1038565367d8d49651a9846aa5
SHA512
f6afb02a03c9d2762e81f09e1713dea7889f1c29381acb76f5777f0defd93d7ce8b0615d878592cc76b463adfda5d6f23cea915690607aaf6bbffcedfe4a97d7
SSDEEP
3072:c383xvJZ7+UzWabFrFl4xQ/hOYnidWVLqNA97Z1pzZfiM1VOFxjzngGqApMtsrDJ:jnWG5FcQMp4V24jiM1MrnyAKs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
105fd575941aab7fc6ea8ff911e93dd0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CTXMsY
PexzPmpe
TNxsVF
rHPEYjn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.