COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
672d1c53e6b69113e59cadd7486dc437_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
672d1c53e6b69113e59cadd7486dc437_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
672d1c53e6b69113e59cadd7486dc437_JaffaCakes118
Size
21KB
MD5
672d1c53e6b69113e59cadd7486dc437
SHA1
d860f2d1aac899f6aa8373c337770a6c12fd498f
SHA256
f329bc53e4ce138ee11dac4139190de73c4415d364095d61a9616def25710c1b
SHA512
5bb681f560bc2a2a08c6bf5dd54efce704b2d210e809fc00b158c98d64ff6da2501d4421a67f6bd4ec595794a01f3cc595eea2d992adea8619c2654db15f9668
SSDEEP
384:XwhNQC+MEZL5MrI6HkLNtLANzRET8lNxCm6js+v39b2CZE79xYD6:ATQ9L5sNkLTL4UONxCmW1tCy89xYu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
672d1c53e6b69113e59cadd7486dc437_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ