Outt
Sett
Behavioral task
behavioral1
Sample
f2ff073a1c8cbf654b674009be5d69cf_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f2ff073a1c8cbf654b674009be5d69cf_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f2ff073a1c8cbf654b674009be5d69cf_JaffaCakes118
Size
65KB
MD5
f2ff073a1c8cbf654b674009be5d69cf
SHA1
051e6f34f2bcdb6fab7006fdb54a11bc1d106bd8
SHA256
3e1c446a4024b223da44fb58a65cce8fe5212bc4544aa33a2847921d8bc637c9
SHA512
18cfbdbf281b5695f97e21d8af3cd989ad0f0255483988b3a848c0d9b80788baa1ca6dea0ff6b4e3ef321246eb86691a8cdde063fc4c05b9ce4531aaab74d775
SSDEEP
1536:evOkTkSBt+Izd9VoqA6Hw1Vihu5/BWhl7Q:jRSD/z7JHw1VzpUhi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f2ff073a1c8cbf654b674009be5d69cf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ