JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
2e8f883a52fc8d8a121432127a9cbd27_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e8f883a52fc8d8a121432127a9cbd27_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2e8f883a52fc8d8a121432127a9cbd27_JaffaCakes118
Size
215KB
MD5
2e8f883a52fc8d8a121432127a9cbd27
SHA1
e047e44a77ab70f479c5edb5ba7064ec5c5fea3b
SHA256
7907ed482402291cc31b1b45220f7b125389b8dc9cb12a4a9125001518e69597
SHA512
530639758e4569c64f5353b8dc980de38500d287fbd295d610db8b4bc4750af74baf4903480cb3797ee750ba8dd71b160879fbaf1d2318f21bd77cc81f20477b
SSDEEP
384:pwusyr+IUQ414ElX32xRZm7zWF9uBAQ/AxT1lJB3QcU:RDQQp8mDZm7zbgBffdU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e8f883a52fc8d8a121432127a9cbd27_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ