CNWZSyLuxDNE
DtjhYgT
NJMUnjmVN
TrMXtnV
cChXcVOLUz
Behavioral task
behavioral1
Sample
55c49be0b9cefc9479bd35948e541037_JaffaCakes118.dll
Resource
win7-20240708-en
Target
55c49be0b9cefc9479bd35948e541037_JaffaCakes118
Size
173KB
MD5
55c49be0b9cefc9479bd35948e541037
SHA1
aec70176f1fab43b579ff203c4724f4942c49741
SHA256
77a3590e6893e5c33c774536c6e52fcb5e991a85203d28b1e4de13b293e06af8
SHA512
ca516821c677d05ca933cd9071443a373a62227352b4e3b56614af780ee2543b3513fc0d799bc0fb817ed77f4e47e6b482ef998bba684a91e93da393a26df830
SSDEEP
3072:dRqb3b/pbMHjMIjDTOBR5BWw2tfhdh4z6P8dUo+bfdQIaoPAyt:dRqKHjzzOB/BT2tf5Awbf21H
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
55c49be0b9cefc9479bd35948e541037_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CNWZSyLuxDNE
DtjhYgT
NJMUnjmVN
TrMXtnV
cChXcVOLUz
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ