Outt
Sett
Behavioral task
behavioral1
Sample
f0b0c405b29f0a39ec67634c1e21259f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0b0c405b29f0a39ec67634c1e21259f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f0b0c405b29f0a39ec67634c1e21259f_JaffaCakes118
Size
70KB
MD5
f0b0c405b29f0a39ec67634c1e21259f
SHA1
222ac285ad6d6dfc853d7ef4d1f3a5d6a2fd9642
SHA256
5e14d8643f96ea1dc9102b02a49a1c71f42918b96340d1bc2b9689f506cf0ec7
SHA512
4d76b5aca8c01ceec7879430bb0b11dbd989c53cb852d110010d7196777778fa2ce6749d49a6099f003f969e8a5af7365563ab7875d2c6f7d3b16f28854f9e6a
SSDEEP
1536:p+CZ8LwKKjTARlD+fEccVSz/buqQX8KImNWAkOP6X/uV4Pacu/e:gXEgwEccVLVMKJNWROP6X/cNcu/e
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f0b0c405b29f0a39ec67634c1e21259f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ