Outt
Sett
Behavioral task
behavioral1
Sample
f07811457b949e4af5c9fc2c6c1c764f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f07811457b949e4af5c9fc2c6c1c764f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f07811457b949e4af5c9fc2c6c1c764f_JaffaCakes118
Size
46KB
MD5
f07811457b949e4af5c9fc2c6c1c764f
SHA1
e6f741646cb2bc1110d50410b8069457bdf336ad
SHA256
63a83400fb45d606fa2569c1621e91982313d104e067a45058590d0ca2e5a89e
SHA512
01b44b70defaa879eff222564adfea2054b16bd998624c0b3a3189a9db84b6c079b7142f80485546a590874b31304738cca33e0d59a1f183728f54207e9266b4
SSDEEP
768:GQxrhypDESkRA0HVCzXrx1Kei7lT/ZFUBvhNga5Rfha0tfzz+XqKfaoByzR8kTwn:GQ3tfgXKeGaX35lhLiXvaoZn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f07811457b949e4af5c9fc2c6c1c764f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ