Outt
Sett
Behavioral task
behavioral1
Sample
f40997d603853db14b3cc712638ac76f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f40997d603853db14b3cc712638ac76f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f40997d603853db14b3cc712638ac76f_JaffaCakes118
Size
62KB
MD5
f40997d603853db14b3cc712638ac76f
SHA1
4d4dcecefd3602bb4bd2310da39b6996fe5c5973
SHA256
3e923954bedfce413ae0bacb8d5eb86223048e8669a44a34f22abc4ceb605ef5
SHA512
5297a861e27e9209bc1f6bb1a7ec5b42e9a5e1ccbf1a057f3b366ca7c1209d2745e763088d61f1009e4c08e2b274f30283e81d10f8de7538f1d02aedcd67b8d4
SSDEEP
1536:EG8jEns62z//LhfosKIF2gX7/5HHAOyKlSxMyN+LFrA:EGyEnB2z//tqpgX7xHgO7qO8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f40997d603853db14b3cc712638ac76f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ