Outt
Sett
Behavioral task
behavioral1
Sample
474e9e41de2ee10b7e4c3d0e9eac2d41_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
474e9e41de2ee10b7e4c3d0e9eac2d41_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
474e9e41de2ee10b7e4c3d0e9eac2d41_JaffaCakes118
Size
62KB
MD5
474e9e41de2ee10b7e4c3d0e9eac2d41
SHA1
87a4d87213f1db022428f9a8870f4fc42260e3f3
SHA256
afee36eefad50beec62d856f3f60a65debf9f7bd0663afd9bf11b508730ee9ee
SHA512
55a9623a8c8167095194945c6bbb3d71f7b527d54e14076fcb9fc0afff630b5049de234ad3c51801c5cf9024d2a2953ad9210f6188280c8f30d15379e8e27d04
SSDEEP
1536:V2bQoc676bt+LgsRJi/5lK9avrpXFWzFAQ0OZVrUU8Pnk+MCy:W5L76Z+3R+5Y9avrp1EFbWUiMCy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
474e9e41de2ee10b7e4c3d0e9eac2d41_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ