COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
X5pVSzSF
dP5yRxpb
Behavioral task
behavioral1
Sample
0458ccc4609191adf7809a15956ecb24_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0458ccc4609191adf7809a15956ecb24_JaffaCakes118
Size
17KB
MD5
0458ccc4609191adf7809a15956ecb24
SHA1
8665ea382ca0cfcc3e6dc7ff690d73e78346df85
SHA256
a239186460db9b9c146d50831f1debc5e74e6c038640b45876cd640f4990941c
SHA512
19665c91a406a8195b481cb29afa88a4eb4bb0d34a21508ff10183a46d61f5de9d131a3f907dfb631462edb0296a0923834b55d6670df1a3ee36677adaac7256
SSDEEP
384:lbp7KOQwYJZDeSFwkuZp/dkvknhcp9fP1e67wxguPUG8jxd5:Vp7KhwOZLw3n/evknipF1itsGQT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0458ccc4609191adf7809a15956ecb24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
X5pVSzSF
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE