orlrkpmhqsn
tqzenafu
wbhls
zgnbtmts
Behavioral task
behavioral1
Sample
2642af10fabdfac20ad0eed2d931ad4a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
2642af10fabdfac20ad0eed2d931ad4a_JaffaCakes118
Size
121KB
MD5
2642af10fabdfac20ad0eed2d931ad4a
SHA1
b51d018bc8724b5c2d3c2ecf720fa4b42b64f90b
SHA256
e97b195c83a132573f8794e2fb2ed292b16b8a1496ff2796ec7d606af5303ff0
SHA512
c7cdbb7cc0a65dbe4bb88dc57029cc7c6c6ee7b6719dcdb1b6bb3e8922eb78d2747646c2f821a0440c858eea43e68dc859ead4f8d2f4a53fa9eaf03a54836130
SSDEEP
3072:c23YIwCnhSBKMk/Of9YNhz7nmrlsCCXjw6tOaGelzq:KChYKMk/w9YNhz7mrlsoFarlm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2642af10fabdfac20ad0eed2d931ad4a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
orlrkpmhqsn
tqzenafu
wbhls
zgnbtmts
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ