JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
27703341362487907dcbc20e2a364b4f_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
27703341362487907dcbc20e2a364b4f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27703341362487907dcbc20e2a364b4f_JaffaCakes118
Size
16KB
MD5
27703341362487907dcbc20e2a364b4f
SHA1
bb8d959972bfaff9bdfa2142a0e4045d7abc366a
SHA256
0eda10d4297675700060473305547ea4deb4ae1b7fc86652cd8e5a8ac085ba5c
SHA512
6abfd0356b021a26a2722453daeb9f39685b52370c2ba3731a73da29d02335cf1f2fd1d42982d559d929d7b7fb08689de2ffd2e102bae9ce903e1590df504a03
SSDEEP
384:LdSQu+A94mjk2WAmKS3cL+uJhVqD7x/q3cs7TcJIvFquYMbbW:xSQpF1cLt7EHpgcs7IQqoa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
27703341362487907dcbc20e2a364b4f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ