MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
Behavioral task
behavioral1
Sample
191c99ca59efb5109c6348ec21baf49a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
191c99ca59efb5109c6348ec21baf49a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
191c99ca59efb5109c6348ec21baf49a_JaffaCakes118
Size
13KB
MD5
191c99ca59efb5109c6348ec21baf49a
SHA1
d63d19ed0f0b7a24efa41eea17b2da1c2d646a7e
SHA256
cf2ab64aa9ba316f22aeff68a6b67c384e1909570babc230cee815f74c0465db
SHA512
f1743470185db3b6e9df9dc1311cf46e628511b5a60e253258200221b206130a4e554790f2cb4e393e7098666492928b0953c5741911a7edce6c9540eb6f6555
SSDEEP
192:sqtQ6O+OkNybTYeez3VWxZNseZX6V2oPITvI+YminskWbPp5/kXK+cM9sT3QB:sqQhk4PYeeRWxZNZtkrinahkpJkXZ+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
191c99ca59efb5109c6348ec21baf49a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MKRaUvb5AfM9JXDkDZ8y
S200
dP5yRxpbTyfes2EY
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ