COMResModuleInstance
myImeInit
Behavioral task
behavioral1
Sample
e9e150fc72166f5861cf2316e2ec0bdf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e9e150fc72166f5861cf2316e2ec0bdf_JaffaCakes118
Size
21KB
MD5
e9e150fc72166f5861cf2316e2ec0bdf
SHA1
06bbd4b4d80a3942c617a6ee60b560cc8e8235db
SHA256
9e64ee097fbcfd3f194f39438ce5efe9fdd19f09bc449946dfca1f2e48439f8c
SHA512
9abec5ae2c72c0eabfcbbf6e13d4952eb55b91d7c210c08c807d7383562ef60c519c7cb904c55e38c9ef37203b2334dfec45e18882054d2bb16f177216439cc9
SSDEEP
384:Cz0wPh+PSGHzO6LL17Kmaj92ppUp5T0jUK/iO2gDia6FQYWIPG9:QWzO6LL1XMRSUKhdunPG9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e9e150fc72166f5861cf2316e2ec0bdf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
myImeInit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE