Outt
Sett
Behavioral task
behavioral1
Sample
f647333c30a31f41dae107fffa835d90_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f647333c30a31f41dae107fffa835d90_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f647333c30a31f41dae107fffa835d90_JaffaCakes118
Size
64KB
MD5
f647333c30a31f41dae107fffa835d90
SHA1
ab29e6723bec5309aa1f2081f22d5c8c163ae906
SHA256
3f364fd9825d4af9cabcaaf0f9a9219eb5f4a4dbd59b439042b817918372b9f1
SHA512
71a44dda6c716a9ba598291a27cb1b713ef72048c517bbb3bc9bb679a1e9721bb07d67cabdd5e8dc2ec5c57c55017c9d0b842005cb6f59352f053edb4b435b34
SSDEEP
1536:soa1lMWiox/aKEXkL6TKE+EnA9HKNsOrBex8AV:SMWiyalXkOTKEtOYsOr0J
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f647333c30a31f41dae107fffa835d90_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ