JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
454f556e5550e4b3351d9250debb85ee_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
454f556e5550e4b3351d9250debb85ee_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
454f556e5550e4b3351d9250debb85ee_JaffaCakes118
Size
16KB
MD5
454f556e5550e4b3351d9250debb85ee
SHA1
b4217c28c268ad5c10d5402f1c28afca822e6c04
SHA256
d57d62ec986af0b24cdc9ae0d796393edbee5f038e8358f9bbc02863799d7930
SHA512
1246e2ff448600ba33096d3af72a2aaaa105b0c350c077d96e0366e707bf591c92f5d59b8ea54ef59c24de6ad8d8fb2f79ed2dae77df751ecefc90c25355342e
SSDEEP
384:xjLeK0qZ3gx0CLFKRc84wOy5J1h4cQUT3sBApe6aysX51:xLP0q+2YYv4m7h4crT3s+fanXL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
454f556e5550e4b3351d9250debb85ee_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ