COMResModuleInstance
myImeInit
Behavioral task
behavioral1
Sample
b0e3a7a031b6952b188a623313f2cf3d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b0e3a7a031b6952b188a623313f2cf3d_JaffaCakes118
Size
22KB
MD5
b0e3a7a031b6952b188a623313f2cf3d
SHA1
3752aad9e6f4103d1d9d2f9a9e4c3c8bb4746787
SHA256
9441dfc743b3bd0a534fb6dc4c57cf36f9722b2fe39c7e26368595a2f3063b7a
SHA512
a90e84ad312f4c37d3f81257dfecadf338ac3707c58996e843d164e0189c35b524bcc55e41e11ece542ee79e64cf903622d59dbb3bb9c02ce2c9c0dee07e99b0
SSDEEP
384:bLSURY1vEu0/4LLO0NSs1E8LkPNbCDt2lgDlEvp7axNmL12nvJLtvDytG9I:HVip30ALLX1E8LkPNOky07axNO2vnOGi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
static1/unpack001/out.upx | upx |
Checks for missing Authenticode signature.
resource |
---|
b0e3a7a031b6952b188a623313f2cf3d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
myImeInit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ