COMResModuleInstance
X8d6wRhVPsmE3Ktxc
bZfkYxe7Rutfxwswj
cHzdWu7VyM8SdVD4r
Behavioral task
behavioral1
Sample
77ac677c57b0e4c5cc8df6ca6c2a9d68_JaffaCakes118.dll
Resource
win7-20240708-en
Target
77ac677c57b0e4c5cc8df6ca6c2a9d68_JaffaCakes118
Size
21KB
MD5
77ac677c57b0e4c5cc8df6ca6c2a9d68
SHA1
a28e6bb61f13fe757f196ca76fa8bfeafd21ced8
SHA256
5985447ba61ce23d9ef2dd2566d27a2ec2da58f9e089fd3ced492eede1cf94c0
SHA512
84e55bb246a1bcdab968a99fb31bf947c4507812b34dccc96e1152da991f7b97ceb126afb89a3f03bbb0ce8b86a7110a991cec7e96610168fea1ff02f8fcd110
SSDEEP
384:Ol4K1TCJ7QE8QzfFJC8Gamd8tZieYcvxLEyohELrdEqlnNso2Lf5K:OZCR8QT7C8Ga48tZecJLqufhm5K
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77ac677c57b0e4c5cc8df6ca6c2a9d68_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
X8d6wRhVPsmE3Ktxc
bZfkYxe7Rutfxwswj
cHzdWu7VyM8SdVD4r
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ