COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
5cf1b7242539e4d7cdff51c5aef6c073_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5cf1b7242539e4d7cdff51c5aef6c073_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cf1b7242539e4d7cdff51c5aef6c073_JaffaCakes118
Size
21KB
MD5
5cf1b7242539e4d7cdff51c5aef6c073
SHA1
70be0362249d32fbaaae1b84ffc7a7cb2b44ecf7
SHA256
6074736a17a4f1ab69fa31df17b909c35413b6e5a15d526752a988fa4ae862ff
SHA512
d86b06f645e99edebd9e4bace5297ba090476019899a552d72a9445123c586afda0d17078cd85fd23a3403cab0e999f0f71b3734ed887acdc312ffd458616094
SSDEEP
384:X0hNQC+MEZL5MrI6HkLNtLANzIBT8lNxCm6js+v39b2CZudW+/UZ3h:ETQ9L5sNkLTL4QONxCmW1tCyeN+R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5cf1b7242539e4d7cdff51c5aef6c073_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ