Outt
Sett
Behavioral task
behavioral1
Sample
19771cb4aaf4f008456b90b7b0e6b8c9_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19771cb4aaf4f008456b90b7b0e6b8c9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19771cb4aaf4f008456b90b7b0e6b8c9_JaffaCakes118
Size
57KB
MD5
19771cb4aaf4f008456b90b7b0e6b8c9
SHA1
c0a7daac876cfb62acabe3b589def5cf2253929a
SHA256
94cb048add25be7ed631cc7b97201253440948083af501d139e4a92813fcb2d2
SHA512
6daf649cb8b49163666856e433d66ab5f640e46685792067c814e8f032c1cc49f4bee3573f7265cfdc1f001afe2854161751c766309184cf0933358b758c0a5b
SSDEEP
1536:ANUC5ik2hBKdeq9cSHpVP4AMoEnH34HhA5YR2D4Y:AWC5ixBKdeqm0pJDMoEnH34LQp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
19771cb4aaf4f008456b90b7b0e6b8c9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ