COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
23cf85dc96d78d030ee44b14fb4be622_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
23cf85dc96d78d030ee44b14fb4be622_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23cf85dc96d78d030ee44b14fb4be622_JaffaCakes118
Size
18KB
MD5
23cf85dc96d78d030ee44b14fb4be622
SHA1
e78f3e50236756a8444bbf8059c98e01c85ddd21
SHA256
49cde8b67e31f9445374b76ef6e338e5f0f161c345cacb10a2184429e14ad846
SHA512
8fb06e531681edd9d91dd832cd5bd5fe460b7d71f330da9435ec82c0df016575ae658f383259dd21a646ac329d70b37a5dddf7a90f3256d5a700f54ac4e4bc01
SSDEEP
384:hU7oN2jhc9y6a1e2LgOnTVO55hQjAOQmZ1jwnTJPPhZ1AdfAnWGo:hDI6XK1ns5ijp5wn91AinC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
23cf85dc96d78d030ee44b14fb4be622_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ