re
xuvyvzoa
Behavioral task
behavioral1
Sample
e87a7eedb84420faae59f5c64a7000e9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e87a7eedb84420faae59f5c64a7000e9_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e87a7eedb84420faae59f5c64a7000e9_JaffaCakes118
Size
283KB
MD5
e87a7eedb84420faae59f5c64a7000e9
SHA1
4afd388e0c753ab8bffaeb79c7103ab606fa3825
SHA256
20d20a4941ec525d7f3dec15e1c55d740755d5cce6258e72b4cfd663a0ad910e
SHA512
c77e7d5cc8395a55545771f74766248dfe98b34da21d6fc285324557e7c006add83c2a8d98f23b355580b6893f754ea871d206c2fe91ec97eb4868388808fc20
SSDEEP
6144:x4zd1hzZpEv267sq7YRt3xo26EdrP6cVww6ySE+p5W9+oSl:6zPpZp36g5pxo26ExP62ww6hpY+oSl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e87a7eedb84420faae59f5c64a7000e9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
re
xuvyvzoa
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE