Outt
Sett
Behavioral task
behavioral1
Sample
f1c11f3d52e75445d29fb07ab7efcd0d_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f1c11f3d52e75445d29fb07ab7efcd0d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f1c11f3d52e75445d29fb07ab7efcd0d_JaffaCakes118
Size
66KB
MD5
f1c11f3d52e75445d29fb07ab7efcd0d
SHA1
300472e9bd721394acad5805065f93a5ff129947
SHA256
3d97ba419b8c4d58e26c7fc0f033aa848da20297525e0ad0e817d178f59c5a60
SHA512
d0fa101fbd6a0b3cb52ff58008bc24c33fdb47e19d71220313ee4f88d14adc5b9477d0fd88a227104efc7c2a23f43fb1a7988bf5449f6da09a1bd1d9bcbd4368
SSDEEP
1536:4sKXEeinOi4TMzBaEQVCl4/BTFu0RcC6pAcmK9Lt8:NWiOi4TMzB1QVCl4Z53RcNttt8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f1c11f3d52e75445d29fb07ab7efcd0d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ