MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
43dc4b8f8dbb7d47d4ea5811ae03635b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
43dc4b8f8dbb7d47d4ea5811ae03635b_JaffaCakes118
Size
14KB
MD5
43dc4b8f8dbb7d47d4ea5811ae03635b
SHA1
89c9d16ea3bf29af6d5d2f6a8152a5659d19740f
SHA256
be58aeb3349f28d8f199ea23c91542186829933263eb53f5b090068588209ea6
SHA512
b4ed81953ba3de397ea6a37374c08c2fcefb914f170eae19b2b6bb764145788821a14b5721d1513e7bbeab26223f8fbc73f13979ae6b90ff86355df6302f7633
SSDEEP
192:se3E8hUJA5wg3rdcnE7DvWruFDLjZbse/HIT3ZpBckm0hG0QR5vRi9RlnA1:seUJA5V3OnE+uFhseg3rBhBhG02N+RM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43dc4b8f8dbb7d47d4ea5811ae03635b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ