JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
398b68f1dba623e22e8cba3f7663ce9c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
398b68f1dba623e22e8cba3f7663ce9c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
398b68f1dba623e22e8cba3f7663ce9c_JaffaCakes118
Size
15KB
MD5
398b68f1dba623e22e8cba3f7663ce9c
SHA1
d93de11b443a9fe375f556d55c867f30860ba464
SHA256
67bfbad73279f0af6c5f9cb55b02a9455e04965cfcf06e1f8727d1de7bd18198
SHA512
4b671b3de7a4828c72386a7c4990c646f781195b916dd050e18c101480f65bc3de9d5fddb8710c3c05b91720b2cbf6dd273a73e1138d08f9fcf5fc026b86d98a
SSDEEP
384:5Q4Olst6peiHYE3TtiQH41/zb4CTKQRKaHZm:tGsU8QqICTKQQag
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
398b68f1dba623e22e8cba3f7663ce9c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ