Outt
Sett
Behavioral task
behavioral1
Sample
e767dec163f747966119109d1697f3fa_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e767dec163f747966119109d1697f3fa_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e767dec163f747966119109d1697f3fa_JaffaCakes118
Size
62KB
MD5
e767dec163f747966119109d1697f3fa
SHA1
d818b4bcdfc04b73d89fe691ecc9fb37db711336
SHA256
740f7180c130a62014a87463ca2107249d2d198486eee71e007d2cffc4490ac6
SHA512
da24b85e9f98805f2a1412c9ffcd71653f13c1bd0108c42089e59ac50b78aa0aeeff9736b39c1b3572794e7ec435ba61f40f28b43f2a20450bcdb9a89de2d2c4
SSDEEP
1536:p+CZ8LwKKjTA6MPJSbJrWe8Zifq9eHL4lMCR/HfWyd:gXE0PwEsFoMCR/HOe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e767dec163f747966119109d1697f3fa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ