Outt
Sett
Behavioral task
behavioral1
Sample
f176b52fc26b9f7a9c8b69ea029bafab_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f176b52fc26b9f7a9c8b69ea029bafab_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f176b52fc26b9f7a9c8b69ea029bafab_JaffaCakes118
Size
64KB
MD5
f176b52fc26b9f7a9c8b69ea029bafab
SHA1
a4b60c3b92327dbca22c62ed96da0d8af4c69803
SHA256
41fecb477664de8cc3008fc9d27174b60e2e41a0c9f0d8fe01e8da798ee6cc5b
SHA512
def09371ba2db111c4192d44c8a4c272189b539e199245a2a5ab0895aef2bbce7a031b5dbe0f2eb5e666cb6914404a24dfb2c0fef998ab8033d2ff4225e0a9f6
SSDEEP
1536:9nTCls9bIPx0LMrY3+33u4vo9x7ehwuPmbShhiAUh:JCsZIPx0wrYvSGuuKnI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f176b52fc26b9f7a9c8b69ea029bafab_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ