Outt
Sett
Behavioral task
behavioral1
Sample
f329117c055e4fe848cdfe760faab011_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f329117c055e4fe848cdfe760faab011_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f329117c055e4fe848cdfe760faab011_JaffaCakes118
Size
81KB
MD5
f329117c055e4fe848cdfe760faab011
SHA1
3344c22054617afbbb229cb17b71f82713121118
SHA256
624797cf99cc1004934079de174e0eb470cceae82777bde9dc64715a47155f96
SHA512
ad4b773ee6bd0651b1996d3ac832f8e9296f9540a786a8e3a9d585ffe6c791d0c49a8e952d9eee1b8fbe02f1322b7a0bdec0d7229767ca08201ebbbd185329bb
SSDEEP
1536:agF0eiyUcb8ZH+25vP9tDYHdcIRkgTfNYUJZOVeMAsVb8diGuJpfB:t2yFoX5vVtDUcI5NYUJZD1sYbWpfB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f329117c055e4fe848cdfe760faab011_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ