COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
5bd1cf93298ff86613704f1a20dba2e6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5bd1cf93298ff86613704f1a20dba2e6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5bd1cf93298ff86613704f1a20dba2e6_JaffaCakes118
Size
221KB
MD5
5bd1cf93298ff86613704f1a20dba2e6
SHA1
086e49edd23cd78e451d138f6fa148adaab702d5
SHA256
35dbe49bcd494966e3d6b35b33530431bfe3e21d46015367ad7ec3d11dd39b2f
SHA512
87f8768a329b3feff70aa8ec11750e119cc465a7601db56bcf5ecbb8210de6f77dc04378be3dd0eacc71dfa57622b44fd002241bb83ca7afa2b2a7095cf060ee
SSDEEP
384:ucb/fbs0+Ils7g0PYUzfZr8mNRMl8RaxAWvFZjB/mFK/MmM1AuBA:5b/fb7lEguXI8RGzF//i+MmM1/BA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5bd1cf93298ff86613704f1a20dba2e6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ