COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
b8e91120f38ce0aae62c92a6069effcd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8e91120f38ce0aae62c92a6069effcd_JaffaCakes118
Size
16KB
MD5
b8e91120f38ce0aae62c92a6069effcd
SHA1
1806ac930b630621e0e9d7c9f0a1124cc87cccec
SHA256
36d5325e6a5fc062cd637ec7d81cea33f3fc9d80d540e9f63f4759f88289e006
SHA512
35e4eb0736c16d71c88736740081a69db7d3235863f26d3f77097be864403fe22bfd1600812eb6213cf70c909d0d595ed8ba7fece087161047bd726fbb6d086d
SSDEEP
192:zEP2sp+v1ewiN43fmJuAIjGopXiVP3SBRF65/W+KePoBASQrPdizjG9o6WvBSTs:4LckeeJu5w1SAjlnSQjdi+u6gcs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8e91120f38ce0aae62c92a6069effcd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ