Outt
Sett
Behavioral task
behavioral1
Sample
f1f5197fc99e3f3d6085c040c06aa945_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1f5197fc99e3f3d6085c040c06aa945_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f1f5197fc99e3f3d6085c040c06aa945_JaffaCakes118
Size
57KB
MD5
f1f5197fc99e3f3d6085c040c06aa945
SHA1
d39df0e89ed4711f27d2b9428da3e38eeeb3960e
SHA256
3b1807a55a8d1dd0aa5b7c97eebeec79ed0250c4f921308b76c674e0ceb6cf1f
SHA512
340910af08757394d96ddeda48f53b61225fec2a00a0cf356369ceba1340840e13ada116770e6c7cee17d2308fe544ba3558c68ba148efe6ccedc0578e69c9fd
SSDEEP
768:Gx4m7JNSll3dTG+KOTed4nF2gc9gM+0+vUK9CPWRRVXJL4SS6MtwPKh2O9VcIzO7:Bm1NGJVGYOWugr0HUCPUZLuuGVc4o
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f1f5197fc99e3f3d6085c040c06aa945_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ