Outt
Sett
Behavioral task
behavioral1
Sample
f292d303df840b2c41dff31739bdc1ac_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f292d303df840b2c41dff31739bdc1ac_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f292d303df840b2c41dff31739bdc1ac_JaffaCakes118
Size
62KB
MD5
f292d303df840b2c41dff31739bdc1ac
SHA1
a41af4f8571e02e807efd3c41cfd46135fde22d5
SHA256
3bb50f42b04f9ac26f7ef4ee5c03445377aceef889c218d947bb85db3331618b
SHA512
0031981c529d355fb12d8668280926784d4d744b6fc3153dfbb08dd6ddabe20739a53f472c5f313d21ebdbe4bb59cf9c4dfc1f154d7bd2e27d712b0608d66a91
SSDEEP
1536:mPO6KEVbsVP0g1uaSN9Qqklj7Kl77pXj46xvQXCqNI:cMEVbsVcCqYN7QpzZxvQXCqNI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f292d303df840b2c41dff31739bdc1ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ