COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
15c37ba9df020014c8aca7bbdfd140e4_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15c37ba9df020014c8aca7bbdfd140e4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
15c37ba9df020014c8aca7bbdfd140e4_JaffaCakes118
Size
16KB
MD5
15c37ba9df020014c8aca7bbdfd140e4
SHA1
33e15d9c4c9d3702c3e1d9ebf1ebb572de6d3ecd
SHA256
c8c35226fd6383634ab71b9a976d589e4886f7149e1e90b59cd0bd9e1aa0b980
SHA512
bbe34e8b5a28f6f431f20b24ecc36f7125f20db0e0924bdf67a92c8ca28cc5c0614837fc56ef23fcee516d7f429bab89217b65e7cae6109378061379d3f59ba8
SSDEEP
192:XfPupnqrP1Q/jvXR7lKcMRqEE50JMTfkkE9A383c/qq6BGKPC1V18yswnYpR/dyn:vPulqr16TSwEEKCdMsQOFsrNdykTAD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15c37ba9df020014c8aca7bbdfd140e4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ