GetNewInf
GetNewSock
Behavioral task
behavioral1
Sample
74c374a42667ee515c72808da1b4ec30_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
74c374a42667ee515c72808da1b4ec30_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
74c374a42667ee515c72808da1b4ec30_JaffaCakes118
Size
408KB
MD5
74c374a42667ee515c72808da1b4ec30
SHA1
789f74735bc9fd15b543f5c23ee43abaa4e86576
SHA256
f2e391f9c8c5f917b9de28d149ad6b2ac2dd5ea6599382fcea87acd968dbc81f
SHA512
732c439a30046f6db4855b27686b3a6fc175380b65d41e41b7c5243237bb94a5ff9a32cece75bc8a4f6c8e91b6489d68a43771f688ad4fdd41cf58e1e4e8e2e4
SSDEEP
6144:oqW//1vi+lNLbgiOHIq6kibjlldQTLwk8/A7ifqi1XLPLi0CScST5fuYyAUgx3xz:QNTzjygbjyHwj/A7ifqi17W0CSU1kBx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
74c374a42667ee515c72808da1b4ec30_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetNewInf
GetNewSock
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ